last executing test programs: 44.966496693s ago: executing program 32 (id=61): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x3, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 44.412207116s ago: executing program 1 (id=74): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg$unix(r4, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) 43.53124637s ago: executing program 1 (id=87): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 43.44309649s ago: executing program 1 (id=89): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) 43.27281331s ago: executing program 1 (id=90): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4a16, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x5, 0x31e, &(0x7f0000000a80)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000001008500000086000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) semget$private(0x0, 0x2, 0x118) 42.829033883s ago: executing program 1 (id=94): socket(0x10, 0x803, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8b, 0x76}, [@call={0x27}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket(0x200000100000011, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 42.828807843s ago: executing program 33 (id=94): socket(0x10, 0x803, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8b, 0x76}, [@call={0x27}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket(0x200000100000011, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 40.180418775s ago: executing program 5 (id=128): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_create1(0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x145c, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2000}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 40.121183725s ago: executing program 5 (id=129): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) close(r0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r0) 39.927600266s ago: executing program 5 (id=133): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xb, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r3}, 0x69) 39.868267266s ago: executing program 5 (id=135): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f00000001c0)="84", 0x1) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f00000003c0)) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@discard}, {@bsdgroups}, {@resuid}, {@noblock_validity}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000200), &(0x7f0000000400)={0x0, 0xfb, 0x6c, 0x3, 0x1, "8ccaa77c0871db57e43377513f0445ee", "fa3046e066eeb7c652e601b37dcabfc29bd1bdc4ae10c53577a17bcac87bea12da0500fa11fca2afdd2ca1457272b2fb4d252915d0d67688b24b47a34859a16033f7afeda7263595a96f42aa543cfbe7465f00c2b87392"}, 0x6c, 0x1) llistxattr(&(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x0) 39.604108197s ago: executing program 5 (id=139): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x2, 0x6, @remote}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 38.88657298s ago: executing program 5 (id=152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 38.832609471s ago: executing program 34 (id=152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 33.288072365s ago: executing program 6 (id=238): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) 32.870748217s ago: executing program 6 (id=242): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 32.794526087s ago: executing program 6 (id=246): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f00000010c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0), 0x3, 0x56a, &(0x7f00000015c0)="$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") write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000440)={0x1, 0x10, 0xfa00, {&(0x7f0000000300)}}, 0x18) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)='s', 0x1}], 0x1, 0xb9c4, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) setxattr$trusted_overlay_opaque(0x0, &(0x7f00000001c0), &(0x7f0000000240), 0x2, 0x2) 32.543473128s ago: executing program 6 (id=251): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000005c0)={[{@dots}, {@dots}, {@dots}, {@dots}, {@fat=@nfs}, {@fat=@gid}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8b3}}, {@fat=@check_strict}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x1}}, {@dots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@fat=@tz_utc}, {@nodots}, {@dots}, {@fat=@showexec}, {@nodots}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") open(&(0x7f00000000c0)='./bus\x00', 0x64842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x300, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x55c, &(0x7f0000000b00)="$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") ioctl$FS_IOC_SETFLAGS(r0, 0x4c02, &(0x7f0000000140)) r1 = timerfd_create(0x7, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r2 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000400)='./file0\x00', r2, &(0x7f0000000440)='./file1\x00') 32.29704764s ago: executing program 6 (id=257): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x10000, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xa0bf83d7d46f2cbb}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000000c0)={0x800000, 0x0, 0x0, 0x0, 0x0, 0x6}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffff00}) close_range(r4, 0xffffffffffffffff, 0x0) 31.995784061s ago: executing program 6 (id=267): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 31.963820381s ago: executing program 35 (id=267): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17.065523258s ago: executing program 7 (id=558): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000040002850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x0, &(0x7f0000003240)=ANY=[], 0x6, 0x36b, &(0x7f0000000580)="$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") r2 = creat(&(0x7f0000000040)='./bus\x00', 0xc) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x39) write$binfmt_script(r4, &(0x7f0000000080), 0x208e24b) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}]) 16.874227749s ago: executing program 7 (id=559): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 16.801526249s ago: executing program 7 (id=561): rt_sigprocmask(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nouid32}, {@minixdf}]}, 0x1, 0x504, &(0x7f0000001480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) 16.52840461s ago: executing program 7 (id=562): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) 16.386978191s ago: executing program 7 (id=563): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xaf5, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000004c0)={@val, @void, @eth={@multicast, @remote, @val={@val={0x88a8, 0x2, 0x0, 0x1}, {0x8100, 0x7}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x65, 0x0, 0x1, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010102}}}}}}, 0x2e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_read_part_table(0x5ea, &(0x7f0000001100)="$eJzs2z1oW1cYBuBPjlXRZPCSKXRIMoRSuiR0jChpkJSEBIwSLyWUBBJCiCYFAgoVdUmGREOCNRh38+IatPhnsqrBk40LnY3p4GLw4KEt9mLwYhW5p9BCXWoqF0qfB8HH0X3vfe9BZ1XwnzYQP3dz3UxEdHMRJ45490irULx+dvhK+U5EJu5GxGdfvf9170omJXpP7Tmf1utpPTV5svN651q29f3t3Qv3lhoDvz1y9OATp6bbI33YHsdsJr889OJltfSmln+8Vqpvvlr97tbsdqHcvtlozt3IXn2QcivpBx5M66dRi+fxJO5HJb6Mh1HtU/9Ea+Pi/plSa+HR5b1i5+3ipYPUUc/10foPDmxE9PqfnRv7tFnvfjF/evyj2jfflrdSdSV3bK8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAfZWN56MXLaulNLf94rVTffLX6463Z7UK5fbPRnLuRvfog5VbSHEzzadTieTyJ+1GJSjyM6uEVg3/VP5P/Y/9Ea+Pi/plSa+HR5b1i5+3ipZQbTrP23j/c8OH93V7/s3NjHzfrn3w4f3q8d7m8deLXXCX3Z3e/09+XAQAAAAAAAAAAAAAAAAAA4H+rULx+dvhK+U5EJu5GxAc/fT7Q+76b/u+eSbnzaa7nojsUEVOTJzuvd65lI27vXri31Pgh5UcjE6MRcWq6PfL7nnf/xT3x9/0SAAD//9ZZkEs=") 16.101027412s ago: executing program 7 (id=570): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x572e, 0x2, 0x2, 0xfffffffe}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x14, r3, 0x30b, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 16.099086952s ago: executing program 36 (id=570): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x572e, 0x2, 0x2, 0xfffffffe}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x14, r3, 0x30b, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 13.940462393s ago: executing program 3 (id=612): memfd_create(&(0x7f0000000100)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\f\xeaH\xd8cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0', 0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = syz_io_uring_setup(0x6165, &(0x7f0000000300)={0x0, 0xd191, 0x10100, 0x0, 0xa4}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x402}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 13.909910793s ago: executing program 3 (id=614): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0xa3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r3 = dup2(r2, r2) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7ffc, 0x7, 0x1004, 0x40000009, 0x103}) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) 13.842402803s ago: executing program 3 (id=615): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 13.642220554s ago: executing program 3 (id=621): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f00000001c0)="84", 0x1) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f00000003c0)) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@discard}, {@bsdgroups}, {@resuid}, {@noblock_validity}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000200), &(0x7f0000000400)={0x0, 0xfb, 0x6c, 0x3, 0x1, "8ccaa77c0871db57e43377513f0445ee", "fa3046e066eeb7c652e601b37dcabfc29bd1bdc4ae10c53577a17bcac87bea12da0500fa11fca2afdd2ca1457272b2fb4d252915d0d67688b24b47a34859a16033f7afeda7263595a96f42aa543cfbe7465f00c2b87392"}, 0x6c, 0x1) llistxattr(&(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x0) 13.444872285s ago: executing program 3 (id=624): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) futex_waitv(&(0x7f0000001140)=[{0x8000, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000740)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xc4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 13.197133736s ago: executing program 3 (id=625): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) sendmsg$sock(r2, &(0x7f0000001540)={&(0x7f0000000280)=@pppoe={0x2a, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'bridge_slave_1\x00'}}, 0x80, 0x0}, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(r4, r3, 0x0) 13.196924976s ago: executing program 37 (id=625): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) sendmsg$sock(r2, &(0x7f0000001540)={&(0x7f0000000280)=@pppoe={0x2a, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'bridge_slave_1\x00'}}, 0x80, 0x0}, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(r4, r3, 0x0) 5.697207353s ago: executing program 8 (id=762): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x7de, &(0x7f0000000240)={0x0, 0x49cb, 0x10100, 0x1, 0x193}, &(0x7f0000000140)=0x0, &(0x7f0000000540)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5.659055363s ago: executing program 8 (id=765): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) 4.701511537s ago: executing program 8 (id=784): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, r3, 0x25, 0x2}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 4.474584338s ago: executing program 8 (id=787): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000005c0)={[{@dots}, {@dots}, {@dots}, {@dots}, {@fat=@nfs}, {@fat=@gid}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8b3}}, {@fat=@check_strict}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x1}}, {@dots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@fat=@tz_utc}, {@nodots}, {@dots}, {@fat=@showexec}, {@nodots}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$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") open(&(0x7f00000000c0)='./bus\x00', 0x64842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x300, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x55c, &(0x7f0000000b00)="$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") ioctl$FS_IOC_SETFLAGS(r0, 0x4c02, &(0x7f0000000140)) r1 = timerfd_create(0x7, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r2 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000400)='./file0\x00', r2, &(0x7f0000000440)='./file1\x00') 4.275041759s ago: executing program 8 (id=793): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) 4.093709401s ago: executing program 4 (id=795): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x10860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r2], 0x1}, 0x58) listen(r1, 0x1d) close(r1) 3.976930961s ago: executing program 8 (id=797): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r2, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381c988a8", 0xe}, {&(0x7f00000005c0)="c2c10b270d21", 0x6}], 0x2) 3.976680511s ago: executing program 38 (id=797): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r2, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381c988a8", 0xe}, {&(0x7f00000005c0)="c2c10b270d21", 0x6}], 0x2) 3.642483233s ago: executing program 4 (id=804): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d5, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0) 2.692901747s ago: executing program 4 (id=809): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280), 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000380)={'broute\x00', 0x0, 0x0, 0x0, [0x4, 0x7fff, 0xa, 0xffffffffffffffff, 0x8e, 0x6]}, &(0x7f0000000400)=0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21085e, &(0x7f00000001c0)={[{@grpquota}, {@nouid32}, {@minixdf}]}, 0x1, 0x504, &(0x7f0000001480)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9sCWE0KoEqJHkNqQuFEUO45ipzShh/TMFYlKnODIH8C5J+5cENy4lAMSPyJQg8TBaMaT1E3tJtokdhR/PtJo3ps3nu97cea9+Dn2C2BoXY2I3YgYi4h7ETGdHc9lW9xqb8l5z/ceLe3vPVrKRat155+5tDw5Fh2PSVzJrlmMiB9+N+InuVfjNrZ31har1cpmlp9t1jZmG9s7N1ZriyuVlcp6ubwwvzD3yc2Py2fW1vdqY1nqq8/+sPutnyXVmsqOdLbjLLWbXjiMkxiNiO+fR7ABGMnaMzboivC55CPi7Yh4P73/p2MkfTYBgMus1ZqO1nRnHgC47PLpHFguX8rmAqYiny+V2nN478RkvlpvNK/fr2+tL7fnymaikL+/Wq3MZXOFM1HIJfn5NP0iXz6SvxkRb0XEL8Yn0nxpqV5dHuQfPgAwxK4cGf//M94e/wGAS6446AoAAH1n/AeA4WP8B4DhY/wHgOHTHv8nBl0NAKCPvP4HgOFj/AeAofKD27eTrbWfff/18oPtrbX6gxvLlcZaqba1VFqqb26UVur1lfQ7e2rHXa9ar2/MfxRbD2e+vdFozja2d+7W6lvrzbvp93rfrRTSs3b70DIAoJe33nv651wyIn86kW7RsZZDYaA1A85bftAVAAZmZNAVAAbGal8wvE7xGt/0AFwSXZbofUmx2weEWq1W6/yqBJyza18y/w/DqmP+338Bw5Ax/w/Dy/w/DK9WK3fSNf/jpCcCABebOX6gx/v/b2f732ZvDvx4+egZT7o+bjfrXs6uggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHABHaz/W8rWAp+KfL5UingjImaikLu/Wq3MRcSbEfGn8cJ4kp8fcJ0BgNPK/y2Xrf91bfrDqZeK3r1ymByLiJ/+6s4vHy42m5t/jBjL/Wv84HjzSXa83P/aAwDHOxin033HC/nne4+WDrZ+1ufv34mIYjv+/t5Y7B/GH43RdF+MQkRM/juX5dtyHXMXp7H7OCK+2K39uZhK50DaK58ejZ/EfqOv8fMvxc+nZe198rP4whnUBYbN06T/udXt/svH1XTf/f4vpj3U6WX9X3Kppf20D3wR/6D/G+nR/109aYyPfv+9dmri1bLHEV8ejTiIvd/R/xzEz/WI/+EJ4//lK+++36us9euIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m85Rz/YeDf7x6fU3e5Ul7Z/sEb94TPu/fsL2/+Z/9370tdfE/+YH3eLn453XxE/GxG+cMP7i5O+KvcqS+Ms92n/c83/9hPGf/XXnlWXDAYDBaWzvrC1Wq5VNCYmLn0h+ZS9ANbomPutXrLHoXvTzD9r39JGiVuv1F/yse1GvHuMsZt2Ai+Dwpo+I/w66MgAAAAAAAAAAAAAAQFf9+MTSoNsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA5fX/AAAA//+YXdZi") r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 2.271727809s ago: executing program 4 (id=822): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000005c0)={[{@dots}, {@dots}, {@dots}, {@dots}, {@fat=@nfs}, {@fat=@gid}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8b3}}, {@fat=@check_strict}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x1}}, {@dots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@fat=@tz_utc}, {@nodots}, {@dots}, {@fat=@showexec}, {@nodots}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$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") open(&(0x7f00000000c0)='./bus\x00', 0x64842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x300, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x55c, &(0x7f0000000b00)="$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") ioctl$FS_IOC_SETFLAGS(r0, 0x4c02, &(0x7f0000000140)) r1 = timerfd_create(0x7, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r2 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000400)='./file0\x00', r2, &(0x7f0000000440)='./file1\x00') 2.13019038s ago: executing program 4 (id=819): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0x2, 0x7fff7ffc}]}) io_uring_setup(0x6ddd, &(0x7f00000002c0)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) close_range(r2, 0xffffffffffffffff, 0x0) 2.09396391s ago: executing program 9 (id=820): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000500)={0xa, 0x1000, 0x0, @mcast1, 0x9}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x80044940, &(0x7f00000030c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4203c, &(0x7f00000003c0)=ANY=[@ANYRES64=r4, @ANYRES8, @ANYRES16, @ANYRESDEC, @ANYRES32, @ANYRESDEC=r4, @ANYRESDEC=r6, @ANYRES8=0x0, @ANYRES8, @ANYRES64=r5], 0x0, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000d00)={{r0}, r6, 0x2, @inherit={0x68, &(0x7f0000000380)={0x0, 0x4, 0x9, 0x400, {0x20, 0x40, 0x4, 0xc19e, 0x1}, [0xfffffffffffffff9, 0x0, 0x1, 0x8]}}, @devid}) write$binfmt_script(r2, &(0x7f0000000440), 0x1000a) sendfile(r1, r2, &(0x7f0000000000), 0x1001) 2.02442067s ago: executing program 9 (id=821): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000001000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 2.023272691s ago: executing program 0 (id=831): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 1.99402819s ago: executing program 9 (id=823): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x7b, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r2}, 0x10) 1.909303191s ago: executing program 4 (id=824): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000fb00000000000000", @ANYRES32=0x1], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) alarm(0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_robust_list(&(0x7f0000000600)={0x0, 0x10}, 0x18) 1.884848471s ago: executing program 39 (id=824): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000fb00000000000000", @ANYRES32=0x1], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) alarm(0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_robust_list(&(0x7f0000000600)={0x0, 0x10}, 0x18) 1.580001862s ago: executing program 0 (id=827): close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x12) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) readv(r3, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) 1.165142914s ago: executing program 2 (id=830): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "77746a315690a576", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", "5d362ced", "bc3a20b10f4ad11e"}, 0x38) close(r3) 1.151887605s ago: executing program 2 (id=832): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="45f9e8e5af9f7e488a1619ea0cd4902570249f1e29b175dfa0d3ae9be1933b972b835f966d432045a33e064403006bdb8ef95b90e76baae34f74778049ff8fa4a59adf7623aaddb922b32dbbfda740b88a07e87eb2cd97c0", 0x58}, {&(0x7f0000000840)="c1c8a40034f2e641b62b4615ef30e1d8f253ab64e1889171265fae014ebfba6a9f6f4934996b0c948c5eec481fa7654ceba096079643904cd1729ef95002e6bce7ff7bcff5d8d9611d266f2e0981e758b8be3005cb85b9ebea29f484f8b9b61bce1f12", 0x63}], 0x2}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 715.540727ms ago: executing program 0 (id=833): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x8000, &(0x7f0000000300)=ANY=[], 0xfe, 0x1c7, &(0x7f0000000740)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000001600)=0x20000000) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)={0x34, r3, 0x1, 0x0, 0xfffffffe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7c}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}]}, 0x34}, 0x1, 0x100000000000000, 0x0, 0x20044849}, 0x0) 714.228517ms ago: executing program 9 (id=841): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x20000155, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1050f0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2904, 0x4, 0x4, 0x0, 0x0, 0xfffffffe, 0xffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 668.843757ms ago: executing program 0 (id=834): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000), 0xfc, 0x553, &(0x7f0000000180)="$eJzs3V1rZGcdAPD/mcxkk91oovaiCq2LLewW3cyma9sg0l1BvCso1es1ZGdD2ElmyUzaTSiSxQ8giGjBG73yRvADCLIfQYSCvRcryqJbBXuhPeW8zL5MZ5rJNjOzTH4/eOY85/X/f2Ym531yAjixzkbElYiYiYgXImKxHF4pSxwUJZvu/XtvrWcliTR9/Z9JJOWwbLKkLJkz5WxzRaev9t7+jbVms7FT9tc7Wzfr7b39C5tbaxuNjcb2pUsrL6++svrS6sVjaWfWrle//bef/+Q333n1D1978y9X/3H+R1m+C+X4bjuOW/Ge1LL34r5qROyMItgEzJTtqUX3BQCAJ1m2j//5iPhKvv+/GDP53txgsw/Vk5FnBwAAAByH9PJC/C+JSAEAAICpVcnvgU0qy+W9AAtRqSwvF/fwPhWnK81Wu/PV663d7WvFvbJLUatc32w2Lpb31C5FLcn6V+6fUSj6X8zHZSV55B7gny3O5+OX11vNa5M44QEAAAAn0Jme4///LBbH/wAAAMCUWZp0AgAAAMDIOf4HAACA6fcYx/+zo8gDAAAAGInvvvZaVtLu86+vvbG3e6P1xoVrjfaN5a3d9eX11s7N5Y1Wa6OZnorYOmx5zVbr5tdje/dWvdNod+rtvf2rW63d7c7VzUcegQ0AAACM0ee+fOfdJCIOvjGfl+he258ZMIPfCsDUqAw5XZq9vDfaXIDxGrSZB6Zf9ZNHu80Xplit6CSTzgOYnMNWAHODpvjjKLIBAABG4dwX77ybJh+//l99cG4AmFLDXv8Hps+A6//p4rgTAcbukOv/wBSruQMQTrzDr/8PUFz/v3J4hDQ9dFkAAMBILeQlqSyX1wIXovJBWoilqCXXN5uNixHx2Yj482LtVNa/ks+Z+NEAAAAAAAAAAAAAAAAAAAAAAAAAAAwpTZNIH0P1seYCAAAAJiGi8vekfP7XucXnF3rPD8wmH+SPAv4wTdM3f/n6L26tdTo7K9nwf+XDZyOi83Y5/MVJnMEAAAAAurpP+S+O02sTzgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAafX+vbfWu2Wcce9+KyKW+sWvxlzenYtaRJz+dxLVh+ZLImLmGOIf3I6Ip/vFT7K0YqnMojd+JSLm8yxGHv+ZNE37xj/zqaPDyXYnW/9c6ff3V4mzebf/33+1KJc/bfzB67/K/fXfTG/8arH++8yQMb70zu/qD/X+4EH1VDG+2n/9042fDFj/PtcvWPXjg374/f39Qbmlv44413f7kzwSq97Zullv7+1f2Nxa22hsNLYvXVp5efWV1ZdWL9avbzYb5WvfGD995vcfDop/92zE6TL+bDencsOyVHS+WbZ/rbf9z2eV2qAlP/D/d27d+0JRrfUsIu7ejjj/XP/P/+m82/f9/9V/01y+HcjGnyu3CclBUY8ov74R8exv//TswPbfnitrR//8zx/e9NwL3/vxX4ecFAAYg/be/o21ZrOxM/LK22maDjdxtlc6/JKTiIPeUdkO3DG3Yj4iBozqHyuGXfJTA1N9bz5iTJ/OUSuXjzJxeupIX7bk4Alo4AmuzOZfyEmvmQAAgOP2YO9/0pkAAAAAAAAAAAAAAAAAAADAyTWO/yvWG/NgMk0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhEHwUAAP//ABHVZA==") 600.614998ms ago: executing program 0 (id=835): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20008001}, 0xc000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r1) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 524.790488ms ago: executing program 2 (id=836): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave'}}, 0x4e}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 372.265178ms ago: executing program 0 (id=837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r5, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x7, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @local}) 365.367728ms ago: executing program 9 (id=838): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 308.762099ms ago: executing program 2 (id=839): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a31070000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2c000000170a0101"], 0x2c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0xfffffffd, 0x0, 0x4, 0x0, "0062ba0700000000ebffffff0000f77fff00"}) dup3(0xffffffffffffffff, r2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0xfff, 0x4, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 124.119579ms ago: executing program 2 (id=840): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "8657e2b7e43b34e4"}, 0x28) write$binfmt_script(r1, &(0x7f0000001300), 0x8f) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) 1.67985ms ago: executing program 1 (id=798): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x30) flock(r3, 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/locks\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0) dup3(r1, r0, 0x0) 902.4µs ago: executing program 9 (id=850): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b39bd, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000020605020a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 2 (id=851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0xfe, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) statfs(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000480)='tracefs\x00', 0x80, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): .974359][ T4086] EXT4-fs (loop4): Block reservation details [ 41.980687][ T4086] EXT4-fs (loop4): i_reserved_data_blocks=514 [ 42.019728][ T1298] bridge_slave_1: left allmulticast mode [ 42.025619][ T1298] bridge_slave_1: left promiscuous mode [ 42.031914][ T1298] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.050340][ T29] audit: type=1400 audit(1732250033.848:565): avc: denied { ioctl } for pid=4111 comm="syz.2.160" path="socket:[6492]" dev="sockfs" ino=6492 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 42.094884][ T1298] bridge_slave_0: left allmulticast mode [ 42.101726][ T1298] bridge_slave_0: left promiscuous mode [ 42.107965][ T1298] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.173726][ T36] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 42.279147][ T1298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.314870][ T1298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.327805][ T4133] loop6: detected capacity change from 0 to 512 [ 42.357322][ T1298] bond0 (unregistering): Released all slaves [ 42.387134][ T4133] EXT4-fs (loop6): orphan cleanup on readonly fs [ 42.395699][ T4133] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 42.417006][ T4137] loop4: detected capacity change from 0 to 512 [ 42.424764][ T4139] vlan0: entered promiscuous mode [ 42.440745][ T4133] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 42.459660][ T4133] EXT4-fs error (device loop6): ext4_ext_check_inode:524: inode #13: comm syz.6.164: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 42.480362][ T1298] hsr_slave_0: left promiscuous mode [ 42.482937][ T4133] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.164: couldn't read orphan inode 13 (err -117) [ 42.491564][ T4139] loop2: detected capacity change from 0 to 2048 [ 42.504904][ T4133] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.519125][ T1298] hsr_slave_1: left promiscuous mode [ 42.525918][ T1298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.534033][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.543869][ T4137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.561026][ T4137] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.572731][ T1298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.580344][ T1298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.592132][ T1298] veth1_macvtap: left promiscuous mode [ 42.597802][ T1298] veth0_macvtap: left promiscuous mode [ 42.603729][ T1298] veth1_vlan: left promiscuous mode [ 42.609439][ T1298] veth0_vlan: left promiscuous mode [ 42.621398][ T4133] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 42.639406][ T4133] EXT4-fs warning (device loop6): read_mmp_block:115: Error -117 while reading MMP block 2 [ 42.683967][ T3761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.699394][ T29] audit: type=1400 audit(1732250034.488:566): avc: denied { ioctl } for pid=4135 comm="syz.4.161" path="/35/bus/cgroup.controllers" dev="loop4" ino=18 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.730516][ T3333] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.783633][ T1298] team0 (unregistering): Port device team_slave_1 removed [ 42.795147][ T4163] loop4: detected capacity change from 0 to 4096 [ 42.802583][ T1298] team0 (unregistering): Port device team_slave_0 removed [ 42.814713][ T4163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.862708][ T4139] vlan0 (unregistering): left promiscuous mode [ 42.876628][ T4152] pim6reg1: entered promiscuous mode [ 42.882180][ T4152] pim6reg1: entered allmulticast mode [ 42.960994][ T4082] chnl_net:caif_netlink_parms(): no params data found [ 43.015629][ T4176] netlink: 24 bytes leftover after parsing attributes in process `syz.3.171'. [ 43.025466][ T29] audit: type=1326 audit(1732250034.808:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4174 comm="syz.2.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c604e819 code=0x7ffc0000 [ 43.050788][ T29] audit: type=1326 audit(1732250034.808:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4174 comm="syz.2.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c604e819 code=0x7ffc0000 [ 43.070370][ T4180] loop6: detected capacity change from 0 to 512 [ 43.076354][ T29] audit: type=1326 audit(1732250034.808:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4174 comm="syz.2.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f40c604e819 code=0x7ffc0000 [ 43.108896][ T29] audit: type=1326 audit(1732250034.808:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4174 comm="syz.2.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c604e819 code=0x7ffc0000 [ 43.120061][ T4180] EXT4-fs: Ignoring removed bh option [ 43.135629][ T29] audit: type=1326 audit(1732250034.808:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4174 comm="syz.2.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c604e819 code=0x7ffc0000 [ 43.166633][ T29] audit: type=1326 audit(1732250034.808:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4174 comm="syz.2.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40c604e819 code=0x7ffc0000 [ 43.191151][ T29] audit: type=1326 audit(1732250034.808:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4174 comm="syz.2.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c604e819 code=0x7ffc0000 [ 43.234707][ T4180] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 43.258097][ T3333] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.272242][ T4180] EXT4-fs (loop6): 1 truncate cleaned up [ 43.279633][ T4180] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.365741][ T4196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'. [ 43.372884][ T3761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.375990][ T4181] Zero length message leads to an empty skb [ 43.447126][ T4082] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.454230][ T4082] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.462193][ T4082] bridge_slave_0: entered allmulticast mode [ 43.471003][ T4210] IPv4: Oversized IP packet from 127.202.26.0 [ 43.478978][ T4082] bridge_slave_0: entered promiscuous mode [ 43.501548][ T4082] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.508995][ T4082] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.536742][ T4082] bridge_slave_1: entered allmulticast mode [ 43.543442][ T4082] bridge_slave_1: entered promiscuous mode [ 43.612294][ C1] hrtimer: interrupt took 28261 ns [ 43.620475][ T4082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.632168][ T4082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.685122][ T4082] team0: Port device team_slave_0 added [ 43.703901][ T4082] team0: Port device team_slave_1 added [ 43.734484][ T4232] syz.6.187[4232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.734557][ T4232] syz.6.187[4232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.757767][ T4082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.776850][ T4082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.781212][ T4232] syz.6.187[4232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.803951][ T4082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.811027][ T4082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.835001][ T4082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.862581][ T4082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.994312][ T4082] hsr_slave_0: entered promiscuous mode [ 44.013715][ T4082] hsr_slave_1: entered promiscuous mode [ 44.031728][ T4082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.043851][ T4252] loop2: detected capacity change from 0 to 512 [ 44.050713][ T4082] Cannot create hsr debugfs directory [ 44.089738][ T4252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.125394][ T4249] syzkaller0: entered promiscuous mode [ 44.131310][ T4249] syzkaller0: entered allmulticast mode [ 44.136636][ T4252] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.269803][ T4082] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 44.280344][ T4082] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 44.295933][ T4082] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 44.322426][ T4082] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 44.334606][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.453586][ T4082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.497601][ T4275] pim6reg1: entered promiscuous mode [ 44.503422][ T4275] pim6reg1: entered allmulticast mode [ 44.542797][ T4082] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.544606][ T4283] loop2: detected capacity change from 0 to 512 [ 44.569464][ T1298] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.577030][ T1298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.607031][ T4283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.625464][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.632750][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.641665][ T4283] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.671083][ T4082] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 44.682501][ T4082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.792402][ T4082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.834695][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.849461][ T4310] loop3: detected capacity change from 0 to 256 [ 44.903660][ T4310] FAT-fs (loop3): IO charset macturkish not found [ 45.045457][ T4339] vlan2: entered promiscuous mode [ 45.047477][ T4337] loop2: detected capacity change from 0 to 512 [ 45.051004][ T4339] vlan2: entered allmulticast mode [ 45.062492][ T4339] hsr_slave_1: entered allmulticast mode [ 45.067916][ T4337] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.095226][ T4337] EXT4-fs (loop2): 1 truncate cleaned up [ 45.106908][ T4337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.110690][ T4082] veth0_vlan: entered promiscuous mode [ 45.135562][ T4339] loop3: detected capacity change from 0 to 2048 [ 45.137359][ T4082] veth1_vlan: entered promiscuous mode [ 45.162006][ T4339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.193117][ T4339] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.205412][ T4082] veth0_macvtap: entered promiscuous mode [ 45.224579][ T4082] veth1_macvtap: entered promiscuous mode [ 45.232761][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.245516][ T4339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.209'. [ 45.274386][ T4339] hsr_slave_1 (unregistering): left allmulticast mode [ 45.284840][ T4339] hsr_slave_1 (unregistering): left promiscuous mode [ 45.296386][ T4082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.307887][ T4082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.317964][ T4082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.328985][ T4082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.339696][ T4082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.350731][ T4082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.361344][ T4082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.372470][ T4082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.384615][ T4082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.396029][ T4082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.406670][ T4082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.416833][ T4082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.427727][ T4082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.438242][ T4082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.449796][ T4082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.459965][ T4082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.473897][ T4082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.485333][ T4082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.503721][ T4082] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.504413][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.512858][ T4082] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.532063][ T4082] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.541781][ T4082] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.647254][ T4376] loop7: detected capacity change from 0 to 1024 [ 45.662117][ T4376] EXT4-fs: Ignoring removed oldalloc option [ 45.687615][ T4376] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 45.738479][ T4376] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.782603][ T4082] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.888492][ T4399] loop6: detected capacity change from 0 to 512 [ 45.896176][ T4402] loop7: detected capacity change from 0 to 128 [ 45.934143][ T4402] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.951151][ T4402] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 45.969370][ T4408] loop3: detected capacity change from 0 to 2048 [ 46.028627][ T4408] loop3: p2 < > [ 46.043610][ T3019] loop3: p2 < > [ 46.064155][ T4082] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.103981][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 46.184229][ T4427] loop2: detected capacity change from 0 to 128 [ 46.186753][ T4431] loop7: detected capacity change from 0 to 128 [ 46.208719][ T4427] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.230042][ T4431] syz.7.226: attempt to access beyond end of device [ 46.230042][ T4431] loop7: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 46.240628][ T4427] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.274822][ T4431] syz.7.226: attempt to access beyond end of device [ 46.274822][ T4431] loop7: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 46.312115][ T4431] syz.7.226: attempt to access beyond end of device [ 46.312115][ T4431] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 46.329841][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.341881][ T4431] syz.7.226: attempt to access beyond end of device [ 46.341881][ T4431] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 46.361845][ T4431] syz.7.226: attempt to access beyond end of device [ 46.361845][ T4431] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 46.404028][ T4431] syz.7.226: attempt to access beyond end of device [ 46.404028][ T4431] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 46.524748][ T3367] hid-generic 0000:0D17:0000.0001: unknown main item tag 0x0 [ 46.533957][ T3367] hid-generic 0000:0D17:0000.0001: unknown main item tag 0x0 [ 46.548556][ T3367] hid-generic 0000:0D17:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 46.624687][ T4460] loop4: detected capacity change from 0 to 128 [ 46.650228][ T4460] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.666483][ T4460] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 46.723010][ T4460] ref_ctr increment failed for inode: 0xc offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888117964fc0 [ 46.747451][ T4459] uprobe: syz.4.231:4459 failed to unregister, leaking uprobe [ 46.795419][ T4470] loop6: detected capacity change from 0 to 1024 [ 46.837828][ T4470] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.861816][ T3333] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.870709][ T4475] tipc: Started in network mode [ 46.880033][ T4475] tipc: Node identity ee0a57902437, cluster identity 4711 [ 46.891788][ T4475] tipc: Enabled bearer , priority 7 [ 46.913765][ T4475] ªªªªªª: renamed from syzkaller0 [ 46.916225][ T4482] loop7: detected capacity change from 0 to 128 [ 46.931210][ T4475] tipc: Disabling bearer [ 46.934983][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 46.934995][ T29] audit: type=1400 audit(1732250038.728:690): avc: denied { create } for pid=4484 comm="syz.4.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 46.978647][ T29] audit: type=1326 audit(1732250038.748:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.4.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe339ffe819 code=0x7ffc0000 [ 47.005373][ T29] audit: type=1326 audit(1732250038.748:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.4.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe339ffe819 code=0x7ffc0000 [ 47.010809][ T3761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.034780][ T29] audit: type=1326 audit(1732250038.748:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.4.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe339ffe819 code=0x7ffc0000 [ 47.055437][ T4489] loop4: detected capacity change from 0 to 512 [ 47.069248][ T29] audit: type=1326 audit(1732250038.748:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.4.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe339ffe819 code=0x7ffc0000 [ 47.069323][ T29] audit: type=1326 audit(1732250038.748:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.4.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe339ffe819 code=0x7ffc0000 [ 47.109334][ T4489] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.126959][ T29] audit: type=1326 audit(1732250038.748:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.4.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe339ffe819 code=0x7ffc0000 [ 47.163103][ T29] audit: type=1326 audit(1732250038.748:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.4.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe339ffe819 code=0x7ffc0000 [ 47.175483][ T4489] EXT4-fs (loop4): 1 truncate cleaned up [ 47.190756][ T29] audit: type=1326 audit(1732250038.748:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.4.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fe339ffe819 code=0x7ffc0000 [ 47.197359][ T4489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.221818][ T29] audit: type=1326 audit(1732250038.748:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.4.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe339ffe819 code=0x7ffc0000 [ 47.264217][ T4489] netlink: 68 bytes leftover after parsing attributes in process `syz.4.239'. [ 47.335894][ T3333] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.455347][ T4509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.494404][ T4509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.521778][ T4513] loop6: detected capacity change from 0 to 1024 [ 47.538650][ T4513] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.538725][ T4513] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.600120][ T4513] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 47.613173][ T4513] EXT4-fs (loop6): This should not happen!! Data will be lost [ 47.613173][ T4513] [ 47.613194][ T4513] EXT4-fs (loop6): Total free blocks count 0 [ 47.613210][ T4513] EXT4-fs (loop6): Free/Dirty block details [ 47.613221][ T4513] EXT4-fs (loop6): free_blocks=0 [ 47.613247][ T4513] EXT4-fs (loop6): dirty_blocks=0 [ 47.613262][ T4513] EXT4-fs (loop6): Block reservation details [ 47.613275][ T4513] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 47.668532][ T4513] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 47 with max blocks 1 with error 28 [ 47.718679][ T4532] netlink: 'syz.4.249': attribute type 10 has an invalid length. [ 47.731899][ T4532] batman_adv: batadv0: Adding interface: team0 [ 47.739203][ T4532] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.764615][ T4532] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 47.795914][ T4540] loop6: detected capacity change from 0 to 256 [ 47.847546][ T4541] netlink: 24 bytes leftover after parsing attributes in process `syz.3.252'. [ 47.857050][ T4540] loop6: detected capacity change from 256 to 0 [ 47.870809][ T4544] netlink: 'syz.4.253': attribute type 3 has an invalid length. [ 47.894119][ T4540] syz.6.251: attempt to access beyond end of device [ 47.894119][ T4540] loop6: rw=0, sector=12, nr_sectors = 4 limit=0 [ 47.908332][ T4540] FAT-fs (loop6): Directory bread(block 3) failed [ 47.914981][ T4540] syz.6.251: attempt to access beyond end of device [ 47.914981][ T4540] loop6: rw=0, sector=12, nr_sectors = 4 limit=0 [ 47.928265][ T4540] FAT-fs (loop6): Directory bread(block 3) failed [ 47.954184][ T3761] syz-executor: attempt to access beyond end of device [ 47.954184][ T3761] loop6: rw=0, sector=12, nr_sectors = 4 limit=0 [ 47.975031][ T3761] FAT-fs (loop6): Directory bread(block 3) failed [ 48.027952][ T56] kworker/u8:4: attempt to access beyond end of device [ 48.027952][ T56] loop6: rw=0, sector=48, nr_sectors = 4 limit=0 [ 48.047130][ T4558] IPv4: Oversized IP packet from 127.202.26.0 [ 48.053500][ T56] FAT-fs (loop6): unable to read inode block for updating (i_pos 770) [ 48.075001][ T3761] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 48.131422][ T4571] loop7: detected capacity change from 0 to 1024 [ 48.163701][ T4571] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 48.177842][ T4580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.187407][ T4580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.216258][ T4571] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.260772][ T4571] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.7.263: corrupted in-inode xattr: bad magic number in in-inode xattr [ 48.280270][ T4571] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 48.381511][ T4082] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.395541][ T36] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.495361][ T4619] loop2: detected capacity change from 0 to 128 [ 48.530316][ T36] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.618240][ T36] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.629417][ T4627] netlink: 'syz.2.273': attribute type 10 has an invalid length. [ 48.682656][ T4627] geneve1: entered promiscuous mode [ 48.694444][ T4627] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 48.716151][ T36] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.769377][ T4632] loop3: detected capacity change from 0 to 1024 [ 48.801841][ T4632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.883093][ T36] bridge_slave_1: left allmulticast mode [ 48.889463][ T36] bridge_slave_1: left promiscuous mode [ 48.896040][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.908122][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.959683][ T36] bridge_slave_0: left allmulticast mode [ 48.966121][ T36] bridge_slave_0: left promiscuous mode [ 48.972157][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.044133][ T4660] loop3: detected capacity change from 0 to 256 [ 49.062207][ T4660] FAT-fs (loop3): Directory bread(block 64) failed [ 49.070573][ T4660] FAT-fs (loop3): Directory bread(block 65) failed [ 49.088459][ T4660] FAT-fs (loop3): Directory bread(block 66) failed [ 49.095380][ T4660] FAT-fs (loop3): Directory bread(block 67) failed [ 49.117653][ T4660] FAT-fs (loop3): Directory bread(block 68) failed [ 49.132088][ T4660] FAT-fs (loop3): Directory bread(block 69) failed [ 49.193490][ T4660] FAT-fs (loop3): Directory bread(block 70) failed [ 49.200284][ T4660] FAT-fs (loop3): Directory bread(block 71) failed [ 49.207127][ T4660] FAT-fs (loop3): Directory bread(block 72) failed [ 49.213728][ T4660] FAT-fs (loop3): Directory bread(block 73) failed [ 49.229408][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.252614][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.276691][ T36] bond0 (unregistering): Released all slaves [ 49.308625][ T4598] chnl_net:caif_netlink_parms(): no params data found [ 49.523606][ T4611] syz.7.271 (4611) used greatest stack depth: 7384 bytes left [ 49.557468][ T36] hsr_slave_0: left promiscuous mode [ 49.646820][ T36] hsr_slave_1: left promiscuous mode [ 49.654880][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.662637][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.675254][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.683126][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.696905][ T36] veth1_macvtap: left promiscuous mode [ 49.702820][ T36] veth0_macvtap: left promiscuous mode [ 49.708401][ T36] veth1_vlan: left promiscuous mode [ 49.713823][ T36] veth0_vlan: left promiscuous mode [ 49.824403][ T36] team0 (unregistering): Port device team_slave_1 removed [ 49.840462][ T36] team0 (unregistering): Port device team_slave_0 removed [ 49.971291][ T4598] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.979379][ T4598] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.987417][ T4598] bridge_slave_0: entered allmulticast mode [ 49.994546][ T4598] bridge_slave_0: entered promiscuous mode [ 50.001440][ T4598] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.008960][ T4598] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.017281][ T4598] bridge_slave_1: entered allmulticast mode [ 50.024178][ T4598] bridge_slave_1: entered promiscuous mode [ 50.045205][ T4598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.073084][ T4598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.131393][ T4598] team0: Port device team_slave_0 added [ 50.146775][ T4598] team0: Port device team_slave_1 added [ 50.172589][ T4598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.179881][ T4598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.207500][ T4598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.223422][ T4598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.233683][ T4598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.264678][ T4598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.410390][ T4598] hsr_slave_0: entered promiscuous mode [ 50.416619][ T4598] hsr_slave_1: entered promiscuous mode [ 50.426566][ T4598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.434416][ T4598] Cannot create hsr debugfs directory [ 50.444171][ T4712] loop7: detected capacity change from 0 to 512 [ 50.503802][ T4712] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.536930][ T4712] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.713666][ T4082] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.734307][ T4598] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 50.747961][ T4598] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 50.761098][ T4598] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 50.777812][ T4598] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 50.799747][ T4745] loop7: detected capacity change from 0 to 256 [ 50.853164][ T4598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.865060][ T4598] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.878074][ T1298] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.885358][ T1298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.900703][ T1298] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.908021][ T1298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.926002][ T4745] FAT-fs (loop7): Directory bread(block 64) failed [ 50.940056][ T4745] FAT-fs (loop7): Directory bread(block 65) failed [ 50.948011][ T4745] FAT-fs (loop7): Directory bread(block 66) failed [ 50.954537][ T4598] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.954564][ T4598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.997145][ T4745] FAT-fs (loop7): Directory bread(block 67) failed [ 51.006145][ T4745] FAT-fs (loop7): Directory bread(block 68) failed [ 51.014896][ T4745] FAT-fs (loop7): Directory bread(block 69) failed [ 51.024225][ T4745] FAT-fs (loop7): Directory bread(block 70) failed [ 51.031206][ T4745] FAT-fs (loop7): Directory bread(block 71) failed [ 51.040259][ T4745] FAT-fs (loop7): Directory bread(block 72) failed [ 51.064664][ T4745] FAT-fs (loop7): Directory bread(block 73) failed [ 51.212453][ T4598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.301176][ T4688] syz.4.287 (4688) used greatest stack depth: 7184 bytes left [ 51.555471][ T4812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.306'. [ 51.574128][ T4812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.306'. [ 51.583362][ T4812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.306'. [ 51.610827][ T4598] veth0_vlan: entered promiscuous mode [ 51.641968][ T4598] veth1_vlan: entered promiscuous mode [ 51.701048][ T4823] pim6reg1: entered promiscuous mode [ 51.706788][ T4823] pim6reg1: entered allmulticast mode [ 51.779748][ T4598] veth0_macvtap: entered promiscuous mode [ 51.797871][ T4598] veth1_macvtap: entered promiscuous mode [ 51.818489][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.830434][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.841127][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.851990][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.861884][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.872658][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.883578][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.894202][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.905063][ T4598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.913569][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.924459][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.935334][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.947738][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.960098][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.973177][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.984264][ T4598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.995129][ T4598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.017393][ T4598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.044167][ T4598] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.054089][ T4598] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.063802][ T4598] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.073128][ T4598] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.102592][ T4849] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 52.239090][ T4866] netlink: 1276 bytes leftover after parsing attributes in process `syz.7.317'. [ 52.268108][ T4858] loop4: detected capacity change from 0 to 8192 [ 52.275504][ T4858] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000008' [ 52.294629][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 52.294643][ T29] audit: type=1326 audit(1732250044.088:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c604e819 code=0x7ffc0000 [ 52.395886][ T4877] dvmrp1: entered allmulticast mode [ 52.404329][ T29] audit: type=1326 audit(1732250044.138:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40c604e819 code=0x7ffc0000 [ 52.429937][ T29] audit: type=1326 audit(1732250044.138:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c604e819 code=0x7ffc0000 [ 52.459322][ T29] audit: type=1326 audit(1732250044.138:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c604e819 code=0x7ffc0000 [ 52.490959][ T29] audit: type=1326 audit(1732250044.138:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40c604e819 code=0x7ffc0000 [ 52.521960][ T29] audit: type=1326 audit(1732250044.138:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c604e819 code=0x7ffc0000 [ 52.555490][ T29] audit: type=1326 audit(1732250044.138:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c604e819 code=0x7ffc0000 [ 52.582350][ T29] audit: type=1326 audit(1732250044.138:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40c604e819 code=0x7ffc0000 [ 52.609046][ T29] audit: type=1326 audit(1732250044.138:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c604e819 code=0x7ffc0000 [ 52.637880][ T29] audit: type=1326 audit(1732250044.138:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c604e819 code=0x7ffc0000 [ 52.909598][ T4898] loop4: detected capacity change from 0 to 512 [ 52.930325][ T4898] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 52.952024][ T4898] EXT4-fs (loop4): orphan cleanup on readonly fs [ 52.961360][ T4898] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.325: bad orphan inode 15 [ 53.026748][ T4898] ext4_test_bit(bit=14, block=18) = 1 [ 53.034822][ T4898] is_bad_inode(inode)=0 [ 53.039605][ T4898] NEXT_ORPHAN(inode)=1023 [ 53.044301][ T4898] max_ino=32 [ 53.047801][ T4898] i_nlink=0 [ 53.100067][ T4898] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #15: comm syz.4.325: corrupted xattr block 19: e_value size too large [ 53.148472][ T4925] loop7: detected capacity change from 0 to 1024 [ 53.172674][ T4898] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 53.179569][ T4925] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 53.186538][ T4898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 53.234360][ T3333] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.259845][ T4925] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 53.300458][ T4933] netlink: 24 bytes leftover after parsing attributes in process `syz.8.331'. [ 53.313363][ T4925] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.320594][ T4937] netlink: 24 bytes leftover after parsing attributes in process `syz.4.332'. [ 53.411246][ T4082] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.487153][ T4946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.336'. [ 53.570854][ T4946] team0 (unregistering): Port device team_slave_0 removed [ 53.606315][ T4965] netlink: 40 bytes leftover after parsing attributes in process `syz.8.340'. [ 53.632732][ T4946] team0 (unregistering): Port device team_slave_1 removed [ 53.645593][ T4965] all: renamed from ip6_vti0 (while UP) [ 53.725008][ T4967] syzkaller0: entered promiscuous mode [ 53.731034][ T4967] syzkaller0: entered allmulticast mode [ 53.898637][ T4989] IPv4: Oversized IP packet from 127.202.26.0 [ 53.917510][ T4988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.346'. [ 54.512152][ T5040] loop4: detected capacity change from 0 to 256 [ 54.606363][ T5040] FAT-fs (loop4): Directory bread(block 64) failed [ 54.612794][ T5044] syzkaller0: entered promiscuous mode [ 54.613509][ T5040] FAT-fs (loop4): Directory bread(block 65) failed [ 54.619178][ T5044] syzkaller0: entered allmulticast mode [ 54.627536][ T5040] FAT-fs (loop4): Directory bread(block 66) failed [ 54.641079][ T5040] FAT-fs (loop4): Directory bread(block 67) failed [ 54.649058][ T5040] FAT-fs (loop4): Directory bread(block 68) failed [ 54.655851][ T5040] FAT-fs (loop4): Directory bread(block 69) failed [ 54.662800][ T5040] FAT-fs (loop4): Directory bread(block 70) failed [ 54.669510][ T5040] FAT-fs (loop4): Directory bread(block 71) failed [ 54.676241][ T5040] FAT-fs (loop4): Directory bread(block 72) failed [ 54.683078][ T5040] FAT-fs (loop4): Directory bread(block 73) failed [ 54.727093][ T5040] bio_check_eod: 3 callbacks suppressed [ 54.727111][ T5040] syz.4.351: attempt to access beyond end of device [ 54.727111][ T5040] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 54.746693][ T5040] syz.4.351: attempt to access beyond end of device [ 54.746693][ T5040] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 54.986849][ T5100] team0 (unregistering): Port device team_slave_0 removed [ 55.010369][ T5100] team0 (unregistering): Port device team_slave_1 removed [ 55.038498][ T5114] macvlan0: entered allmulticast mode [ 55.045294][ T5114] veth1_vlan: entered allmulticast mode [ 55.077062][ T5114] veth1_vlan: left allmulticast mode [ 55.087152][ T5114] macvlan0 (unregistering): left allmulticast mode [ 55.179803][ T5133] loop4: detected capacity change from 0 to 128 [ 55.180897][ T5127] loop2: detected capacity change from 0 to 512 [ 55.220785][ T5133] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.237755][ T5133] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 55.269288][ T5127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.288413][ T5127] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.302263][ T5127] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 55.306210][ T5133] ref_ctr increment failed for inode: 0xc offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88812c8e2f40 [ 55.345048][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.354669][ T5132] uprobe: syz.4.361:5132 failed to unregister, leaking uprobe [ 55.391004][ T3333] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.416705][ T5134] Falling back ldisc for ttyS3. [ 55.513594][ T5154] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.559664][ T5154] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.609425][ T5154] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.634429][ T5167] pim6reg1: entered promiscuous mode [ 55.639925][ T5167] pim6reg1: entered allmulticast mode [ 55.669310][ T5154] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.734760][ T5154] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.770897][ T5154] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.787352][ T5154] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.820997][ T5154] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.864423][ T5187] loop3: detected capacity change from 0 to 2048 [ 55.918244][ T5187] Alternate GPT is invalid, using primary GPT. [ 55.924600][ T5187] loop3: p1 p2 p3 [ 55.988425][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 56.004667][ T4117] udevd[4117]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 56.015267][ T5203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 56.029499][ T4118] udevd[4118]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 56.058358][ T4117] udevd[4117]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 56.061223][ T4118] udevd[4118]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 56.087109][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 56.424779][ T5228] syz.7.381[5228] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.424858][ T5228] syz.7.381[5228] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.449530][ T5228] syz.7.381[5228] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.474835][ T5230] tmpfs: Bad value for 'mpol' [ 56.625898][ T5237] netlink: 'syz.4.384': attribute type 1 has an invalid length. [ 56.657851][ T5237] netlink: 'syz.4.384': attribute type 9 has an invalid length. [ 56.724010][ T5250] syz.4.390[5250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.724102][ T5250] syz.4.390[5250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.740474][ T5250] syz.4.390[5250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.870645][ T5262] hub 9-0:1.0: USB hub found [ 56.889680][ T5259] vlan2: entered allmulticast mode [ 56.895645][ T5259] @: entered allmulticast mode [ 56.900480][ T5259] bond_slave_0: entered allmulticast mode [ 56.906335][ T5259] bond_slave_1: entered allmulticast mode [ 56.913457][ T5262] hub 9-0:1.0: 8 ports detected [ 56.919250][ T5259] @: left allmulticast mode [ 56.924100][ T5259] bond_slave_0: left allmulticast mode [ 56.930007][ T5259] bond_slave_1: left allmulticast mode [ 57.044950][ T5271] loop7: detected capacity change from 0 to 4096 [ 57.063320][ T5271] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.223849][ T5296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.409'. [ 57.238146][ T5300] loop4: detected capacity change from 0 to 128 [ 57.262568][ T5300] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.294621][ T5300] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.320988][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 57.321032][ T29] audit: type=1400 audit(1732250049.118:1023): avc: denied { ioctl } for pid=5299 comm="syz.4.410" path="/83/file1/file1" dev="loop4" ino=12 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.321527][ T5306] smc: net device bond0 applied user defined pnetid SYZ0 [ 57.328866][ T4082] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.361080][ T5306] smc: net device bond0 erased user defined pnetid SYZ0 [ 57.426386][ T3333] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.493364][ T5317] loop8: detected capacity change from 0 to 512 [ 57.520277][ T29] audit: type=1400 audit(1732250049.318:1024): avc: denied { map } for pid=5319 comm="syz.4.414" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 57.546867][ T5317] EXT4-fs: Ignoring removed orlov option [ 57.560392][ T5317] EXT4-fs: Ignoring removed oldalloc option [ 57.577694][ T29] audit: type=1400 audit(1732250049.318:1025): avc: denied { execute } for pid=5319 comm="syz.4.414" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 57.602183][ T29] audit: type=1400 audit(1732250049.368:1026): avc: denied { read } for pid=5324 comm="syz.3.420" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.639948][ T5317] EXT4-fs error (device loop8): ext4_xattr_inode_iget:436: comm syz.8.416: Parent and EA inode have the same ino 15 [ 57.674454][ T5317] EXT4-fs error (device loop8): ext4_xattr_inode_iget:436: comm syz.8.416: Parent and EA inode have the same ino 15 [ 57.697595][ T5317] EXT4-fs (loop8): 1 orphan inode deleted [ 57.711045][ T5317] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.733548][ T5317] syz.8.416 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 57.747836][ T29] audit: type=1326 audit(1732250049.528:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.8.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be7a2e819 code=0x7ffc0000 [ 57.759875][ T5341] loop4: detected capacity change from 0 to 128 [ 57.772317][ T29] audit: type=1326 audit(1732250049.528:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.8.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be7a2e819 code=0x7ffc0000 [ 57.802241][ T29] audit: type=1326 audit(1732250049.528:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.8.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f0be7a2e819 code=0x7ffc0000 [ 57.818575][ T5343] loop3: detected capacity change from 0 to 1024 [ 57.827027][ T29] audit: type=1326 audit(1732250049.588:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.8.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be7a2e819 code=0x7ffc0000 [ 57.857131][ T29] audit: type=1326 audit(1732250049.588:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.8.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be7a2e819 code=0x7ffc0000 [ 57.868938][ T5343] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.891429][ T29] audit: type=1326 audit(1732250049.638:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.8.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0be7a2e819 code=0x7ffc0000 [ 57.920171][ T5341] syz.4.426: attempt to access beyond end of device [ 57.920171][ T5341] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 57.940145][ T4598] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.033264][ T5341] syz.4.426: attempt to access beyond end of device [ 58.033264][ T5341] loop4: rw=0, sector=177, nr_sectors = 1 limit=128 [ 58.057925][ T5340] syz.4.426: attempt to access beyond end of device [ 58.057925][ T5340] loop4: rw=524288, sector=145, nr_sectors = 32 limit=128 [ 58.076809][ T5340] syz.4.426: attempt to access beyond end of device [ 58.076809][ T5340] loop4: rw=524288, sector=185, nr_sectors = 184 limit=128 [ 58.092274][ T5340] syz.4.426: attempt to access beyond end of device [ 58.092274][ T5340] loop4: rw=0, sector=177, nr_sectors = 1 limit=128 [ 58.106098][ T5340] Buffer I/O error on dev loop4, logical block 177, async page read [ 58.115167][ T5340] syz.4.426: attempt to access beyond end of device [ 58.115167][ T5340] loop4: rw=0, sector=178, nr_sectors = 1 limit=128 [ 58.129496][ T5340] Buffer I/O error on dev loop4, logical block 178, async page read [ 58.142212][ T5340] syz.4.426: attempt to access beyond end of device [ 58.142212][ T5340] loop4: rw=0, sector=179, nr_sectors = 1 limit=128 [ 58.158817][ T5340] Buffer I/O error on dev loop4, logical block 179, async page read [ 58.168806][ T5340] syz.4.426: attempt to access beyond end of device [ 58.168806][ T5340] loop4: rw=0, sector=180, nr_sectors = 1 limit=128 [ 58.182755][ T5340] Buffer I/O error on dev loop4, logical block 180, async page read [ 58.194043][ T5340] Buffer I/O error on dev loop4, logical block 181, async page read [ 58.202864][ T5340] Buffer I/O error on dev loop4, logical block 182, async page read [ 58.212532][ T5340] Buffer I/O error on dev loop4, logical block 183, async page read [ 58.221795][ T5340] Buffer I/O error on dev loop4, logical block 184, async page read [ 58.231288][ T5340] Buffer I/O error on dev loop4, logical block 177, async page read [ 58.239640][ T5340] Buffer I/O error on dev loop4, logical block 178, async page read [ 58.255700][ T5360] syzkaller0: entered promiscuous mode [ 58.261398][ T5360] syzkaller0: entered allmulticast mode [ 58.286254][ T5374] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 58.293002][ T5374] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 58.301364][ T5374] vhci_hcd vhci_hcd.0: Device attached [ 58.404352][ T5375] vhci_hcd: connection closed [ 58.404649][ T50] vhci_hcd: stop threads [ 58.413829][ T50] vhci_hcd: release socket [ 58.418376][ T50] vhci_hcd: disconnect device [ 59.124470][ T5418] netlink: '+}[@': attribute type 10 has an invalid length. [ 59.157731][ T5420] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.166932][ T5420] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.185506][ T5425] netlink: 'syz.3.450': attribute type 10 has an invalid length. [ 59.220245][ T5420] bridge0: entered allmulticast mode [ 59.248892][ T5425] @: (slave netdevsim1): Enslaving as an active interface with an up link [ 59.261527][ T5429] bridge_slave_1: left allmulticast mode [ 59.267392][ T5429] bridge_slave_1: left promiscuous mode [ 59.273214][ T5429] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.364729][ T5429] bridge_slave_0: left allmulticast mode [ 59.370651][ T5429] bridge_slave_0: left promiscuous mode [ 59.376611][ T5429] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.464027][ T5436] pim6reg1: entered promiscuous mode [ 59.469429][ T5436] pim6reg1: entered allmulticast mode [ 59.522853][ T5449] syzkaller0: entered allmulticast mode [ 59.535387][ T5449] syzkaller0 (unregistering): left allmulticast mode [ 59.567748][ T5456] loop8: detected capacity change from 0 to 512 [ 59.581325][ T5456] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 59.590290][ T5456] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 59.603808][ T5456] EXT4-fs (loop8): orphan cleanup on readonly fs [ 59.611713][ T5456] EXT4-fs warning (device loop8): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 59.625862][ T5456] EXT4-fs warning (device loop8): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 59.637356][ T5456] EXT4-fs (loop8): 1 truncate cleaned up [ 59.714526][ T5468] loop8: detected capacity change from 0 to 512 [ 59.773558][ T5468] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.848399][ T5486] netlink: 16 bytes leftover after parsing attributes in process `syz.8.475'. [ 60.177282][ T5524] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 60.185363][ T5524] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 60.289614][ T5528] loop3: detected capacity change from 0 to 512 [ 60.308887][ T5528] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.522000][ T5553] syzkaller0: entered promiscuous mode [ 60.528538][ T5553] syzkaller0: entered allmulticast mode [ 60.801084][ T5580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 60.898282][ T5593] ALSA: seq fatal error: cannot create timer (-22) [ 61.015864][ T5611] loop7: detected capacity change from 0 to 512 [ 61.017206][ T5602] loop3: detected capacity change from 0 to 4096 [ 61.026906][ T5611] EXT4-fs: Ignoring removed orlov option [ 61.054282][ T5611] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.073743][ T5611] EXT4-fs (loop7): orphan cleanup on readonly fs [ 61.111123][ T5611] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.514: bg 0: block 248: padding at end of block bitmap is not set [ 61.131041][ T5611] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.514: Failed to acquire dquot type 1 [ 61.144115][ T5611] EXT4-fs (loop7): 1 truncate cleaned up [ 61.202311][ T5619] loop7: detected capacity change from 0 to 128 [ 61.253797][ T5619] bio_check_eod: 220 callbacks suppressed [ 61.253816][ T5619] syz.7.515: attempt to access beyond end of device [ 61.253816][ T5619] loop7: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 61.274763][ T5619] syz.7.515: attempt to access beyond end of device [ 61.274763][ T5619] loop7: rw=2049, sector=153, nr_sectors = 24 limit=128 [ 61.289017][ T5619] syz.7.515: attempt to access beyond end of device [ 61.289017][ T5619] loop7: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 61.313458][ T5625] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.429668][ T5625] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.455893][ T5636] loop8: detected capacity change from 0 to 512 [ 61.471091][ T5625] @: (slave netdevsim1): Releasing backup interface [ 61.483063][ T5625] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.488179][ T5636] EXT4-fs error (device loop8): ext4_orphan_get:1415: comm syz.8.521: bad orphan inode 15 [ 61.506145][ T5636] ext4_test_bit(bit=14, block=5) = 0 [ 61.532839][ T5625] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.603366][ T5625] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.618884][ T5625] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.631691][ T5625] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.664608][ T5645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 61.683718][ T5625] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.788505][ T5650] syz_tun: entered promiscuous mode [ 61.794619][ T5650] vlan2: entered promiscuous mode [ 61.804851][ T5650] syz_tun: left promiscuous mode [ 61.902646][ T5664] loop7: detected capacity change from 0 to 1024 [ 61.910859][ T5666] loop4: detected capacity change from 0 to 128 [ 61.963178][ T5678] loop8: detected capacity change from 0 to 128 [ 61.970222][ T5664] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 62.009831][ T5682] loop2: detected capacity change from 0 to 256 [ 62.022283][ T5666] syz.4.530: attempt to access beyond end of device [ 62.022283][ T5666] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 62.043894][ T5678] syz.8.531: attempt to access beyond end of device [ 62.043894][ T5678] loop8: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 62.104027][ T5666] syz.4.530: attempt to access beyond end of device [ 62.104027][ T5666] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 62.246706][ T5695] loop3: detected capacity change from 0 to 2048 [ 62.301669][ T5705] xt_hashlimit: max too large, truncated to 1048576 [ 62.440457][ T5718] loop4: detected capacity change from 0 to 512 [ 62.480985][ T5695] loop3: unable to read partition table [ 62.489645][ T5695] loop3: partition table beyond EOD, truncated [ 62.496332][ T5695] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 62.523218][ T5720] loop8: detected capacity change from 0 to 512 [ 62.553378][ T5723] xt_TPROXY: Can be used only with -p tcp or -p udp [ 62.563993][ T29] kauditd_printk_skb: 708 callbacks suppressed [ 62.564012][ T29] audit: type=1326 audit(1732250054.318:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.8.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be7a2e819 code=0x7ffc0000 [ 62.596976][ T29] audit: type=1326 audit(1732250054.318:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.8.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be7a2e819 code=0x7ffc0000 [ 62.623819][ T29] audit: type=1326 audit(1732250054.318:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.8.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0be7a2e819 code=0x7ffc0000 [ 62.649857][ T29] audit: type=1326 audit(1732250054.318:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.8.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0be7a2e853 code=0x7ffc0000 [ 62.674394][ T29] audit: type=1326 audit(1732250054.318:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.8.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0be7a2d2ff code=0x7ffc0000 [ 62.702077][ T29] audit: type=1326 audit(1732250054.318:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.8.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0be7a2e8a7 code=0x7ffc0000 [ 62.706235][ T3019] loop3: unable to read partition table [ 62.731096][ T29] audit: type=1326 audit(1732250054.318:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.8.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0be7a2d1b0 code=0x7ffc0000 [ 62.738571][ T3019] loop3: partition table beyond EOD, [ 62.773196][ T29] audit: type=1326 audit(1732250054.318:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.8.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0be7a2e41b code=0x7ffc0000 [ 62.773234][ T29] audit: type=1326 audit(1732250054.328:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.8.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0be7a2d4aa code=0x7ffc0000 [ 62.780000][ T3019] truncated [ 62.806717][ T29] audit: type=1326 audit(1732250054.328:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.8.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0be7a2d4aa code=0x7ffc0000 [ 62.871694][ T5718] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.889087][ T5720] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.928292][ T5731] loop3: detected capacity change from 0 to 512 [ 62.945980][ T5731] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.970033][ T5731] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 62.988409][ T5731] System zones: 1-12 [ 62.993870][ T5731] EXT4-fs (loop3): 1 truncate cleaned up [ 63.073542][ T5738] loop4: detected capacity change from 0 to 4096 [ 63.216493][ T5752] loop7: detected capacity change from 0 to 128 [ 63.271789][ T5752] syz.7.558: attempt to access beyond end of device [ 63.271789][ T5752] loop7: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 63.491399][ T5760] loop7: detected capacity change from 0 to 512 [ 63.531041][ T5760] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.704317][ T5748] loop3: detected capacity change from 0 to 65536 [ 63.893860][ T5766] loop3: detected capacity change from 0 to 128 [ 63.923931][ T5766] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 63.996567][ T5769] loop4: detected capacity change from 0 to 1024 [ 64.029788][ T5773] loop8: detected capacity change from 0 to 1024 [ 64.077136][ T5780] loop3: detected capacity change from 0 to 128 [ 64.130457][ T5782] syzkaller0: entered promiscuous mode [ 64.136748][ T5782] syzkaller0: entered allmulticast mode [ 64.289170][ T5794] loop8: detected capacity change from 0 to 128 [ 64.468462][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 64.561050][ T5817] netlink: 'syz.3.577': attribute type 39 has an invalid length. [ 64.573907][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.583420][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.616215][ T5785] bridge_slave_0: entered allmulticast mode [ 64.628308][ T5785] bridge_slave_0: entered promiscuous mode [ 64.654160][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.663630][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.696370][ T5785] bridge_slave_1: entered allmulticast mode [ 64.705496][ T5785] bridge_slave_1: entered promiscuous mode [ 64.744562][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.768730][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.794094][ T5785] team0: Port device team_slave_0 added [ 64.801145][ T5785] team0: Port device team_slave_1 added [ 64.811976][ T5828] IPv6: Can't replace route, no match found [ 64.820721][ T5826] loop2: detected capacity change from 0 to 2048 [ 64.850498][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.857935][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.884738][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.898088][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.905070][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.931630][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.985585][ T5826] loop2: unable to read partition table [ 64.992895][ T5826] loop2: partition table beyond EOD, truncated [ 64.999250][ T5826] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 65.012620][ T5839] loop4: detected capacity change from 0 to 512 [ 65.030837][ T5839] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.588: casefold flag without casefold feature [ 65.045476][ T5785] hsr_slave_0: entered promiscuous mode [ 65.049176][ T3019] loop2: unable to read partition table [ 65.053593][ T5839] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.588: couldn't read orphan inode 15 (err -117) [ 65.061421][ T3019] loop2: partition table beyond EOD, truncated [ 65.071182][ T5785] hsr_slave_1: entered promiscuous mode [ 65.081811][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.094302][ T5785] Cannot create hsr debugfs directory [ 65.176379][ T5849] loop4: detected capacity change from 0 to 512 [ 65.189062][ T5848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.600'. [ 65.200454][ T5849] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.221984][ T5849] EXT4-fs (loop4): 1 truncate cleaned up [ 65.269001][ T5785] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 65.278134][ T5785] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 65.289602][ T5785] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 65.300437][ T5785] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 65.358726][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.378956][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.390219][ T3736] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.397905][ T3736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.433081][ T3736] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.440499][ T3736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.462901][ T5862] loop4: detected capacity change from 0 to 1024 [ 65.490696][ T5862] EXT4-fs: Ignoring removed oldalloc option [ 65.508320][ T5862] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 65.573222][ T5875] ref_ctr increment failed for inode: 0x2f8 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88812c8e24c0 [ 65.574948][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.599961][ T5874] uprobe: syz.3.599:5874 failed to unregister, leaking uprobe [ 65.827608][ T5785] veth0_vlan: entered promiscuous mode [ 65.850446][ T5785] veth1_vlan: entered promiscuous mode [ 65.871057][ T5785] veth0_macvtap: entered promiscuous mode [ 65.879819][ T5785] veth1_macvtap: entered promiscuous mode [ 65.898580][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.905038][ T5905] loop3: detected capacity change from 0 to 128 [ 65.909546][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.926620][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.937693][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.945705][ T5905] syz.3.609: attempt to access beyond end of device [ 65.945705][ T5905] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 65.948767][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.973894][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.984548][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.987336][ T5905] syz.3.609: attempt to access beyond end of device [ 65.987336][ T5905] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 65.995373][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.015746][ T5905] syz.3.609: attempt to access beyond end of device [ 66.015746][ T5905] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 66.020352][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.045249][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.067204][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.099130][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.109804][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.119912][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.130551][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.140677][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.151695][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.161691][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.172618][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.182683][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.193281][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.207422][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.221256][ T5785] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.230235][ T5785] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.239119][ T5785] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.247932][ T5785] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.311837][ T5914] netlink: 24 bytes leftover after parsing attributes in process `syz.9.571'. [ 66.359751][ T56] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.433703][ T56] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.463533][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 66.481032][ T5925] pim6reg1: entered promiscuous mode [ 66.488439][ T5925] pim6reg1: entered allmulticast mode [ 66.499246][ T56] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.549440][ T56] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.576921][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.9.619'. [ 66.586835][ T5932] bridge_slave_1: left allmulticast mode [ 66.592680][ T5932] bridge_slave_1: left promiscuous mode [ 66.598791][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.621480][ T5932] bridge_slave_0: left allmulticast mode [ 66.627350][ T5932] bridge_slave_0: left promiscuous mode [ 66.633173][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.652241][ T5936] loop3: detected capacity change from 0 to 1024 [ 66.666253][ T5936] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #2: comm syz.3.621: corrupted in-inode xattr: bad e_name length [ 66.680737][ T5936] EXT4-fs (loop3): Remounting filesystem read-only [ 66.731567][ T3329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 66.741198][ T56] bridge_slave_1: left allmulticast mode [ 66.747363][ T56] bridge_slave_1: left promiscuous mode [ 66.758522][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.763603][ T3329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 66.777700][ T56] bridge_slave_0: left allmulticast mode [ 66.784612][ T56] bridge_slave_0: left promiscuous mode [ 66.791091][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.801230][ T3329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 66.819367][ T3329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 66.844143][ T3329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 66.865135][ T3329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 66.880418][ T3329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 66.891371][ T3329] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 66.921929][ T5120] EXT4-fs unmount: 39 callbacks suppressed [ 66.921947][ T5120] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.944754][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.959366][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.972350][ T56] bond0 (unregistering): Released all slaves [ 66.982272][ T5942] pim6reg1: entered promiscuous mode [ 66.988969][ T5942] pim6reg1: entered allmulticast mode [ 67.000643][ T5940] pim6reg1: entered promiscuous mode [ 67.007186][ T5940] pim6reg1: entered allmulticast mode [ 67.106132][ T56] hsr_slave_0: left promiscuous mode [ 67.118434][ T56] hsr_slave_1: left promiscuous mode [ 67.125049][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.133043][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.142450][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.149946][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.163917][ T56] veth1_macvtap: left promiscuous mode [ 67.170032][ T56] veth0_macvtap: left promiscuous mode [ 67.175626][ T56] veth1_vlan: left promiscuous mode [ 67.181038][ T56] veth0_vlan: left promiscuous mode [ 67.350566][ T5972] netlink: 24 bytes leftover after parsing attributes in process `syz.4.635'. [ 67.363915][ T5973] loop2: detected capacity change from 0 to 2048 [ 67.389170][ T5973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.506945][ T5984] loop8: detected capacity change from 0 to 512 [ 67.531707][ T5984] EXT4-fs (loop8): orphan cleanup on readonly fs [ 67.542308][ T5984] EXT4-fs warning (device loop8): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 67.560283][ T5984] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 67.589290][ T5990] netlink: 'syz.4.639': attribute type 39 has an invalid length. [ 67.596623][ T5984] EXT4-fs error (device loop8): ext4_ext_check_inode:524: inode #13: comm syz.8.637: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 67.624785][ T5984] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.637: couldn't read orphan inode 13 (err -117) [ 67.638922][ T5984] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.662587][ T5984] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 67.674101][ T5984] EXT4-fs warning (device loop8): read_mmp_block:115: Error -117 while reading MMP block 2 [ 67.686278][ T5982] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 67.724704][ T4598] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.738249][ T5982] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 67.742425][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 67.752038][ T5982] EXT4-fs (loop2): This should not happen!! Data will be lost [ 67.752038][ T5982] [ 67.770706][ T5982] EXT4-fs (loop2): Total free blocks count 0 [ 67.777283][ T5982] EXT4-fs (loop2): Free/Dirty block details [ 67.783820][ T5982] EXT4-fs (loop2): free_blocks=2415919104 [ 67.790234][ T5982] EXT4-fs (loop2): dirty_blocks=8224 [ 67.796813][ T5982] EXT4-fs (loop2): Block reservation details [ 67.804054][ T5982] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 67.833011][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.840841][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.849141][ T5949] bridge_slave_0: entered allmulticast mode [ 67.863093][ T3736] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 67.879003][ T5949] bridge_slave_0: entered promiscuous mode [ 67.886036][ T5997] loop8: detected capacity change from 0 to 2048 [ 67.887449][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.902112][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.910781][ T5949] bridge_slave_1: entered allmulticast mode [ 67.918566][ T5949] bridge_slave_1: entered promiscuous mode [ 67.928769][ T5997] Alternate GPT is invalid, using primary GPT. [ 67.937052][ T5997] loop8: p1 p2 p3 [ 67.950953][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 67.950970][ T29] audit: type=1326 audit(1732250059.748:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe339ffe819 code=0x7ffc0000 [ 68.024920][ T56] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.043165][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.056681][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.080707][ T29] audit: type=1326 audit(1732250059.748:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe339ffe819 code=0x7ffc0000 [ 68.112387][ T29] audit: type=1326 audit(1732250059.748:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe339ffe819 code=0x7ffc0000 [ 68.123211][ T6005] netlink: 112865 bytes leftover after parsing attributes in process `syz.8.644'. [ 68.143166][ T29] audit: type=1326 audit(1732250059.748:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe339ffe819 code=0x7ffc0000 [ 68.178874][ T29] audit: type=1326 audit(1732250059.748:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe339ffe819 code=0x7ffc0000 [ 68.196254][ T6005] netlink: 18430 bytes leftover after parsing attributes in process `syz.8.644'. [ 68.203246][ T29] audit: type=1326 audit(1732250059.758:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe339ffe819 code=0x7ffc0000 [ 68.203280][ T29] audit: type=1326 audit(1732250059.758:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe339ffe819 code=0x7ffc0000 [ 68.263388][ T29] audit: type=1326 audit(1732250059.758:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe339ffe819 code=0x7ffc0000 [ 68.290626][ T29] audit: type=1326 audit(1732250059.758:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe339ffe819 code=0x7ffc0000 [ 68.315587][ T29] audit: type=1326 audit(1732250059.758:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe339ffe819 code=0x7ffc0000 [ 68.343396][ T56] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.394503][ T6013] netlink: 36 bytes leftover after parsing attributes in process `syz.4.647'. [ 68.404585][ T6013] netlink: 36 bytes leftover after parsing attributes in process `syz.4.647'. [ 68.414931][ T6013] netlink: 36 bytes leftover after parsing attributes in process `syz.4.647'. [ 68.425669][ T5949] team0: Port device team_slave_0 added [ 68.453193][ T6013] netlink: 36 bytes leftover after parsing attributes in process `syz.4.647'. [ 68.472580][ T6020] loop4: detected capacity change from 0 to 512 [ 68.486991][ T56] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.493410][ T6020] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.647: corrupted in-inode xattr: invalid ea_ino [ 68.505853][ T6018] syz.9.649[6018] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.511375][ T6018] syz.9.649[6018] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.524304][ T5949] team0: Port device team_slave_1 added [ 68.524551][ T6018] syz.9.649[6018] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.547126][ T6020] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.647: couldn't read orphan inode 15 (err -117) [ 68.579159][ T6020] EXT4-fs (loop4): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.594522][ T56] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.619811][ T3333] EXT4-fs (loop4): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 68.640574][ T6018] @: renamed from bond0 (while UP) [ 68.658257][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.665804][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.693537][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.705169][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.712219][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.739153][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.754931][ T6031] loop2: detected capacity change from 0 to 1024 [ 68.762337][ T6031] EXT4-fs: Ignoring removed orlov option [ 68.768608][ T6031] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.799198][ T6031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.866114][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.867803][ T5949] hsr_slave_0: entered promiscuous mode [ 68.883926][ T6042] loop4: detected capacity change from 0 to 128 [ 68.893374][ T6042] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.930209][ T6042] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 68.971376][ T5949] hsr_slave_1: entered promiscuous mode [ 68.986830][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.997015][ T5949] Cannot create hsr debugfs directory [ 69.071036][ T6055] pim6reg1: entered promiscuous mode [ 69.076772][ T6055] pim6reg1: entered allmulticast mode [ 69.084224][ T3333] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.183001][ T56] bridge_slave_1: left allmulticast mode [ 69.189032][ T56] bridge_slave_1: left promiscuous mode [ 69.194701][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.212570][ T56] bridge_slave_0: left allmulticast mode [ 69.218881][ T56] bridge_slave_0: left promiscuous mode [ 69.225003][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.241326][ T6071] loop9: detected capacity change from 0 to 512 [ 69.269023][ T6071] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.298443][ T6071] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.369666][ T6082] loop2: detected capacity change from 0 to 256 [ 69.389915][ T6082] FAT-fs (loop2): IO charset macturkish not found [ 69.418407][ T56] @ (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.442782][ T5785] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.453575][ T56] @ (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.474671][ T56] @ (unregistering): Released all slaves [ 69.523550][ T56] hsr_slave_0: left promiscuous mode [ 69.526371][ T6093] loop4: detected capacity change from 0 to 512 [ 69.547004][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.554662][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.556694][ T6093] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.585088][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.593716][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.597481][ T6093] EXT4-fs (loop4): 1 truncate cleaned up [ 69.612513][ T6093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.662740][ T56] veth1_vlan: left promiscuous mode [ 69.663503][ T3333] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.668419][ T56] veth0_vlan: left promiscuous mode [ 69.687908][ T6098] loop9: detected capacity change from 0 to 2048 [ 69.720957][ T6098] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.747205][ T6098] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.847881][ T6095] vlan2: entered promiscuous mode [ 69.853354][ T6095] vlan2: entered allmulticast mode [ 69.858721][ T6095] hsr_slave_1: entered allmulticast mode [ 69.888164][ T6098] hsr_slave_1 (unregistering): left allmulticast mode [ 69.894549][ T6108] syz.2.681[6108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.895927][ T6108] syz.2.681[6108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.908943][ T6108] syz.2.681[6108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.921144][ T6098] hsr_slave_1 (unregistering): left promiscuous mode [ 69.957489][ T6108] @: renamed from bond0 (while UP) [ 70.022665][ T5785] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.027682][ T6114] syzkaller0: entered allmulticast mode [ 70.077263][ T6114] syzkaller0 (unregistering): left allmulticast mode [ 70.227944][ T5949] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.244355][ T6121] loop9: detected capacity change from 0 to 128 [ 70.245813][ T5949] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.271257][ T6122] loop2: detected capacity change from 0 to 2048 [ 70.289779][ T5949] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.309431][ T5949] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.328563][ T6122] loop2: p2 < > [ 70.337441][ T6121] bio_check_eod: 3 callbacks suppressed [ 70.337460][ T6121] syz.9.695: attempt to access beyond end of device [ 70.337460][ T6121] loop9: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 70.393745][ T6121] syz.9.695: attempt to access beyond end of device [ 70.393745][ T6121] loop9: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 70.427383][ T6121] syz.9.695: attempt to access beyond end of device [ 70.427383][ T6121] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 70.455874][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.463296][ T6121] syz.9.695: attempt to access beyond end of device [ 70.463296][ T6121] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 70.482725][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.493213][ T1298] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.500580][ T1298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.510442][ T6121] syz.9.695: attempt to access beyond end of device [ 70.510442][ T6121] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 70.533559][ T1298] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.536702][ T6121] syz.9.695: attempt to access beyond end of device [ 70.536702][ T6121] loop9: rw=0, sector=145, nr_sectors = 8 limit=128 [ 70.542013][ T1298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.623789][ T5949] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.635004][ T5949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.738566][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.768135][ T6153] loop9: detected capacity change from 0 to 128 [ 70.841351][ T6153] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.876557][ T6153] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 70.929282][ T6153] ref_ctr increment failed for inode: 0xc offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88812c8e1f80 [ 70.948968][ T5949] veth0_vlan: entered promiscuous mode [ 70.961077][ T5949] veth1_vlan: entered promiscuous mode [ 70.969789][ T6151] uprobe: syz.9.700:6151 failed to unregister, leaking uprobe [ 70.987544][ T5949] veth0_macvtap: entered promiscuous mode [ 71.004577][ T6162] loop4: detected capacity change from 0 to 512 [ 71.005018][ T5949] veth1_macvtap: entered promiscuous mode [ 71.034233][ T6164] loop2: detected capacity change from 0 to 1024 [ 71.038547][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.052580][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.064015][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.074915][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.082923][ T6162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.085202][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.102422][ T6162] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.109130][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.130811][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.142139][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.154521][ T5785] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.154815][ T6164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.164891][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.188740][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.199385][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.209898][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.221663][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.232759][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.243494][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.254407][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.265505][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.276767][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.289930][ T5949] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.300087][ T5949] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.300455][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.311140][ T5949] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.328437][ T6173] hub 9-0:1.0: USB hub found [ 71.332488][ T5949] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.360381][ T6173] hub 9-0:1.0: 8 ports detected [ 71.375913][ T6175] loop8: detected capacity change from 0 to 512 [ 71.385782][ T6175] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 71.401242][ T6175] EXT4-fs (loop8): 1 truncate cleaned up [ 71.408389][ T6175] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.425866][ T6175] __nla_validate_parse: 6 callbacks suppressed [ 71.425884][ T6175] netlink: 68 bytes leftover after parsing attributes in process `syz.8.705'. [ 71.471708][ T6183] loop2: detected capacity change from 0 to 128 [ 71.546881][ T4598] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.628491][ T3333] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.659450][ T6196] loop2: detected capacity change from 0 to 1024 [ 71.691744][ T6196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.726587][ T6196] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.766244][ T6196] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 71.779071][ T6196] EXT4-fs (loop2): This should not happen!! Data will be lost [ 71.779071][ T6196] [ 71.781268][ T6204] syzkaller0: entered allmulticast mode [ 71.789165][ T6196] EXT4-fs (loop2): Total free blocks count 0 [ 71.801522][ T6196] EXT4-fs (loop2): Free/Dirty block details [ 71.807858][ T6196] EXT4-fs (loop2): free_blocks=0 [ 71.813582][ T6196] EXT4-fs (loop2): dirty_blocks=0 [ 71.819497][ T6196] EXT4-fs (loop2): Block reservation details [ 71.826040][ T6196] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 71.834394][ T6208] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 47 with max blocks 1 with error 28 [ 71.834853][ T6204] syzkaller0 (unregistering): left allmulticast mode [ 71.919012][ T6206] ip6gre1: entered allmulticast mode [ 71.959581][ T6214] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 72.043902][ T6222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.056355][ T6222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.069901][ T6221] netlink: 24 bytes leftover after parsing attributes in process `syz.2.721'. [ 72.072461][ T6225] loop9: detected capacity change from 0 to 128 [ 72.194997][ T6234] loop2: detected capacity change from 0 to 1024 [ 72.228568][ T6234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.269276][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.448329][ T6248] loop9: detected capacity change from 0 to 512 [ 72.489413][ T6248] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.499783][ T6255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.734'. [ 72.513472][ T6248] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.601796][ T5785] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.682099][ T6262] syzkaller0: entered allmulticast mode [ 72.690953][ T6264] loop4: detected capacity change from 0 to 2048 [ 72.713208][ T6262] syzkaller0 (unregistering): left allmulticast mode [ 72.747194][ T6264] loop4: p2 < > [ 72.943051][ T6271] syz.2.740[6271] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.943301][ T6271] syz.2.740[6271] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.060289][ T6271] syz.2.740[6271] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.129582][ T6274] loop4: detected capacity change from 0 to 512 [ 73.180613][ T6274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.194198][ T6274] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.252720][ T3333] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.891732][ T6291] loop0: detected capacity change from 0 to 512 [ 73.910086][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 73.910100][ T29] audit: type=1400 audit(1732250065.708:2071): avc: denied { bind } for pid=6289 comm="syz.4.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 73.936629][ T29] audit: type=1400 audit(1732250065.708:2072): avc: denied { node_bind } for pid=6289 comm="syz.4.749" saddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 73.969600][ T29] audit: type=1400 audit(1732250065.768:2073): avc: denied { shutdown } for pid=6289 comm="syz.4.749" laddr=ff02::1 lport=34499 faddr=fe80:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 74.008772][ T6291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.029048][ T6291] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.066279][ T29] audit: type=1326 audit(1732250065.858:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.9.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f553c46e819 code=0x7ffc0000 [ 74.070464][ T6303] loop8: detected capacity change from 0 to 2048 [ 74.102501][ T29] audit: type=1326 audit(1732250065.898:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.9.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f553c46e819 code=0x7ffc0000 [ 74.130889][ T29] audit: type=1326 audit(1732250065.898:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.9.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f553c46e819 code=0x7ffc0000 [ 74.162635][ T29] audit: type=1326 audit(1732250065.898:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.9.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f553c46e819 code=0x7ffc0000 [ 74.188331][ T29] audit: type=1326 audit(1732250065.898:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.9.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f553c46e819 code=0x7ffc0000 [ 74.212290][ T29] audit: type=1326 audit(1732250065.898:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.9.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f553c46e819 code=0x7ffc0000 [ 74.239718][ T29] audit: type=1326 audit(1732250065.898:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.9.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f553c46e819 code=0x7ffc0000 [ 74.277268][ T6303] loop8: p2 < > [ 74.337575][ T5949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.393100][ T6319] syzkaller0: entered allmulticast mode [ 74.402647][ T6319] syzkaller0 (unregistering): left allmulticast mode [ 74.507256][ T6323] netlink: '+}[@': attribute type 10 has an invalid length. [ 74.517858][ T6323] team0: Port device netdevsim1 added [ 74.526146][ T6323] netlink: '+}[@': attribute type 10 has an invalid length. [ 74.545643][ T6323] team0: Port device netdevsim1 removed [ 74.553435][ T6323] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 74.611413][ T6328] syz.0.763[6328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.611478][ T6328] syz.0.763[6328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.628464][ T6328] syz.0.763[6328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.880913][ T6345] loop0: detected capacity change from 0 to 2048 [ 74.919242][ T6349] netlink: 24 bytes leftover after parsing attributes in process `syz.9.772'. [ 74.938802][ T6345] loop0: p2 < > [ 75.082874][ T6359] loop9: detected capacity change from 0 to 256 [ 75.119433][ T6362] netlink: 40 bytes leftover after parsing attributes in process `syz.9.778'. [ 75.128675][ T6362] all: renamed from ip6_vti0 (while UP) [ 75.276241][ T6369] netlink: 16 bytes leftover after parsing attributes in process `syz.9.781'. [ 75.576423][ T6374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.783'. [ 75.588694][ T6374] batman_adv: batadv0: Removing interface: team0 [ 75.598596][ T6373] loop9: detected capacity change from 0 to 128 [ 75.609060][ T6374] team0 (unregistering): Port device team_slave_0 removed [ 75.613878][ T6373] msdos: Bad value for 'gid' [ 75.623058][ T6373] msdos: Bad value for 'gid' [ 75.632228][ T6374] team0 (unregistering): Port device team_slave_1 removed [ 75.688748][ T6379] syzkaller0: entered promiscuous mode [ 75.695168][ T6379] syzkaller0: entered allmulticast mode [ 75.794371][ T6383] loop8: detected capacity change from 0 to 256 [ 75.802213][ T6382] netlink: 28 bytes leftover after parsing attributes in process `syz.4.788'. [ 75.827560][ T6385] loop9: detected capacity change from 0 to 2048 [ 75.856713][ T6383] loop8: detected capacity change from 256 to 0 [ 75.868734][ T6385] loop9: p2 < > [ 75.879040][ T6383] syz.8.787: attempt to access beyond end of device [ 75.879040][ T6383] loop8: rw=0, sector=12, nr_sectors = 4 limit=0 [ 75.905225][ T6383] FAT-fs (loop8): Directory bread(block 3) failed [ 75.913110][ T6383] syz.8.787: attempt to access beyond end of device [ 75.913110][ T6383] loop8: rw=0, sector=12, nr_sectors = 4 limit=0 [ 75.916958][ T6390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.930964][ T6383] FAT-fs (loop8): Directory bread(block 3) failed [ 75.957628][ T6390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.986206][ T4598] syz-executor: attempt to access beyond end of device [ 75.986206][ T4598] loop8: rw=0, sector=12, nr_sectors = 4 limit=0 [ 76.005853][ T4598] FAT-fs (loop8): Directory bread(block 3) failed [ 76.023235][ T3736] kworker/u8:8: attempt to access beyond end of device [ 76.023235][ T3736] loop8: rw=0, sector=48, nr_sectors = 4 limit=0 [ 76.040269][ T3736] FAT-fs (loop8): unable to read inode block for updating (i_pos 770) [ 76.050009][ T4598] syz-executor: attempt to access beyond end of device [ 76.050009][ T4598] loop8: rw=0, sector=0, nr_sectors = 4 limit=0 [ 76.065301][ T4598] FAT-fs (loop8): unable to read boot sector to mark fs as dirty [ 76.087541][ T6397] loop9: detected capacity change from 0 to 512 [ 76.095217][ T6397] EXT4-fs: Ignoring removed oldalloc option [ 76.105535][ T6397] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 76.122326][ T6397] EXT4-fs (loop9): 1 truncate cleaned up [ 76.131476][ T6397] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.194938][ T5785] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.253438][ T56] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.320733][ T6408] loop9: detected capacity change from 0 to 1024 [ 76.330346][ T6408] EXT4-fs: Ignoring removed orlov option [ 76.339871][ T6408] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.353647][ T56] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.358764][ T6408] EXT4-fs (loop9): stripe (106) is not aligned with cluster size (16), stripe is disabled [ 76.420887][ T6408] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.448091][ T56] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.551088][ T56] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.751122][ T6406] chnl_net:caif_netlink_parms(): no params data found [ 76.863125][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.878177][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.897709][ T56] bond0 (unregistering): Released all slaves [ 76.995559][ T6444] syzkaller0: entered promiscuous mode [ 77.001938][ T6444] syzkaller0: entered allmulticast mode [ 77.036558][ T56] hsr_slave_0: left promiscuous mode [ 77.043267][ T56] hsr_slave_1: left promiscuous mode [ 77.049741][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.058082][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.066361][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.074370][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.083830][ T56] veth1_vlan: left promiscuous mode [ 77.089500][ T56] veth0_vlan: left promiscuous mode [ 77.201304][ T5785] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.213000][ T56] team0 (unregistering): Port device team_slave_1 removed [ 77.252257][ T56] team0 (unregistering): Port device team_slave_0 removed [ 77.306177][ T6482] IPv4: Oversized IP packet from 127.202.26.0 [ 77.355989][ T6406] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.363799][ T6406] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.391564][ T6406] bridge_slave_0: entered allmulticast mode [ 77.407181][ T6406] bridge_slave_0: entered promiscuous mode [ 77.428835][ T6406] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.436647][ T6406] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.458671][ T6406] bridge_slave_1: entered allmulticast mode [ 77.466513][ T6406] bridge_slave_1: entered promiscuous mode [ 77.578380][ T6406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.654086][ T6547] loop4: detected capacity change from 0 to 512 [ 77.674180][ T6406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.718592][ T6406] team0: Port device team_slave_0 added [ 77.725840][ T6547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.744571][ T6406] team0: Port device team_slave_1 added [ 77.765464][ T6547] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.780950][ T6547] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 77.800280][ T6406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.808175][ T6406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.838329][ T6406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.849891][ T6406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.859384][ T6406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.890783][ T6406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.908907][ T3333] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.949463][ T6406] hsr_slave_0: entered promiscuous mode [ 77.957093][ T6555] Falling back ldisc for ttyS3. [ 77.963257][ T6406] hsr_slave_1: entered promiscuous mode [ 77.973310][ T6406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.982465][ T6406] Cannot create hsr debugfs directory [ 77.999158][ T6562] loop4: detected capacity change from 0 to 256 [ 78.057778][ T6562] loop4: detected capacity change from 256 to 0 [ 78.155276][ T5102] kworker/u8:9: attempt to access beyond end of device [ 78.155276][ T5102] loop4: rw=0, sector=48, nr_sectors = 4 limit=0 [ 78.171813][ T5102] FAT-fs (loop4): unable to read inode block for updating (i_pos 770) [ 78.183830][ T3333] syz-executor: attempt to access beyond end of device [ 78.183830][ T3333] loop4: rw=0, sector=0, nr_sectors = 4 limit=0 [ 78.200891][ T3333] FAT-fs (loop4): unable to read boot sector to mark fs as dirty [ 78.352875][ T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.411349][ T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.471974][ T6406] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.481810][ T6406] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.500253][ T28] bond0: (slave netdevsim1): Releasing backup interface [ 78.509494][ T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.521050][ T6406] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.530401][ T6406] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.551502][ T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.587237][ T6406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.602086][ T6406] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.631021][ T6537] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.638848][ T6537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.648722][ T28] bridge_slave_1: left allmulticast mode [ 78.654501][ T28] bridge_slave_1: left promiscuous mode [ 78.660756][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.669721][ T28] bridge_slave_0: left allmulticast mode [ 78.675571][ T28] bridge_slave_0: left promiscuous mode [ 78.681661][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.751845][ T28] dvmrp1 (unregistering): left allmulticast mode [ 78.788759][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.799269][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.809217][ T28] bond0 (unregistering): Released all slaves [ 78.825153][ T5102] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.832335][ T5102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.888444][ T28] hsr_slave_0: left promiscuous mode [ 78.895109][ T28] hsr_slave_1: left promiscuous mode [ 78.903495][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.917682][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.929562][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.939472][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.956093][ T28] veth1_vlan: left promiscuous mode [ 78.958590][ T6606] loop2: detected capacity change from 0 to 1024 [ 78.961690][ T28] veth0_vlan: left promiscuous mode [ 78.988319][ T6606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.005247][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 79.005262][ T29] audit: type=1400 audit(1732250070.798:2251): avc: denied { unlink } for pid=6605 comm="syz.2.829" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 79.057318][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.160077][ T6588] chnl_net:caif_netlink_parms(): no params data found [ 79.223938][ T6588] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.231362][ T6588] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.239339][ T6588] bridge_slave_0: entered allmulticast mode [ 79.246483][ T6588] bridge_slave_0: entered promiscuous mode [ 79.254324][ T6588] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.262907][ T6588] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.271307][ T6588] bridge_slave_1: entered allmulticast mode [ 79.279343][ T6588] bridge_slave_1: entered promiscuous mode [ 79.299219][ T6588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.313770][ T6588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.327232][ T6406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.351348][ T6588] team0: Port device team_slave_0 added [ 79.359915][ T6588] team0: Port device team_slave_1 added [ 79.379213][ T6588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.386364][ T6588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.412648][ T6588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.424211][ T6588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.431668][ T6588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.458985][ T6588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.490550][ T6588] hsr_slave_0: entered promiscuous mode [ 79.497416][ T6588] hsr_slave_1: entered promiscuous mode [ 79.503504][ T6588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.511394][ T6588] Cannot create hsr debugfs directory [ 79.631073][ T6406] veth0_vlan: entered promiscuous mode [ 79.639038][ T6406] veth1_vlan: entered promiscuous mode [ 79.651737][ T6406] veth0_macvtap: entered promiscuous mode [ 79.659395][ T6406] veth1_macvtap: entered promiscuous mode [ 79.669633][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.680360][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.690426][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.700896][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.710972][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.723265][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.737062][ T6406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.757205][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.768096][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.781472][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.792849][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.803242][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.814818][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.826652][ T6406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.835978][ T6406] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.845103][ T6406] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.854735][ T6406] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.863790][ T6406] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.898950][ T6643] tmpfs: Bad value for 'mpol' [ 79.906312][ T6645] tipc: Started in network mode [ 79.911857][ T6645] tipc: Node identity e2c26b364f0b, cluster identity 4711 [ 79.919219][ T6645] tipc: Enabled bearer , priority 7 [ 79.929567][ T6645] ªªªªªª: renamed from syzkaller0 [ 79.944012][ T6645] tipc: Disabling bearer [ 79.952782][ T29] audit: type=1326 audit(1732250071.748:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6646 comm="syz.9.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f553c46e819 code=0x7ffc0000 [ 79.967784][ T6649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.839'. [ 79.976252][ T29] audit: type=1326 audit(1732250071.748:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6646 comm="syz.9.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f553c46e819 code=0x7ffc0000 [ 80.008734][ T29] audit: type=1326 audit(1732250071.788:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6646 comm="syz.9.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f553c46e819 code=0x7ffc0000 [ 80.032423][ T29] audit: type=1326 audit(1732250071.788:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6646 comm="syz.9.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f553c46e819 code=0x7ffc0000 [ 80.056928][ T29] audit: type=1326 audit(1732250071.788:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6646 comm="syz.9.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f553c46e819 code=0x7ffc0000 [ 80.080903][ T29] audit: type=1326 audit(1732250071.788:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6646 comm="syz.9.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f553c46e819 code=0x7ffc0000 [ 80.107942][ T29] audit: type=1326 audit(1732250071.818:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6646 comm="syz.9.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f553c46e819 code=0x7ffc0000 [ 80.134664][ T29] audit: type=1326 audit(1732250071.818:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6646 comm="syz.9.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f553c46e819 code=0x7ffc0000 [ 80.161704][ T29] audit: type=1326 audit(1732250071.818:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6646 comm="syz.9.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f553c46e819 code=0x7ffc0000 [ 80.268792][ T6657] netlink: 28 bytes leftover after parsing attributes in process `syz.9.850'. [ 80.496582][ T6656] ================================================================== [ 80.505091][ T6656] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 80.515219][ T6656] [ 80.517555][ T6656] read-write to 0xffffffff866089c0 of 8 bytes by interrupt on cpu 1: [ 80.525852][ T6656] tick_do_update_jiffies64+0x112/0x1b0 [ 80.531541][ T6656] tick_nohz_handler+0x7c/0x2d0 [ 80.536438][ T6656] __hrtimer_run_queues+0x20d/0x5e0 [ 80.542039][ T6656] hrtimer_interrupt+0x235/0x4a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 80.547034][ T6656] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 80.553077][ T6656] sysvec_apic_timer_interrupt+0x6e/0x80 [ 80.558869][ T6656] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 80.564984][ T6656] acpi_safe_halt+0x21/0x30 [ 80.569532][ T6656] acpi_idle_do_entry+0x1d/0x30 [ 80.574512][ T6656] acpi_idle_enter+0x96/0xb0 [ 80.579131][ T6656] cpuidle_enter_state+0xc5/0x260 [ 80.584396][ T6656] cpuidle_enter+0x40/0x70 [ 80.588854][ T6656] do_idle+0x192/0x230 [ 80.592978][ T6656] cpu_startup_entry+0x25/0x30 [ 80.597772][ T6656] start_secondary+0x96/0xa0 [ 80.602439][ T6656] common_startup_64+0x12c/0x137 [ 80.607407][ T6656] [ 80.609751][ T6656] read to 0xffffffff866089c0 of 8 bytes by task 6656 on cpu 0: [ 80.617351][ T6656] mem_cgroup_flush_stats_ratelimited+0x29/0x100 [ 80.623883][ T6656] count_shadow_nodes+0x6b/0x230 [ 80.628980][ T6656] do_shrink_slab+0x5a/0x680 [ 80.633605][ T6656] shrink_slab+0x4ea/0x850 [ 80.638236][ T6656] shrink_node+0x62f/0x1d60 [ 80.642949][ T6656] do_try_to_free_pages+0x3c6/0xc50 [ 80.648524][ T6656] try_to_free_mem_cgroup_pages+0x1e3/0x490 [ 80.655374][ T6656] try_charge_memcg+0x2bc/0x810 [ 80.660376][ T6656] obj_cgroup_charge_pages+0xbd/0x1a0 [ 80.666407][ T6656] __memcg_kmem_charge_page+0x9d/0x170 [ 80.672107][ T6656] __alloc_pages_noprof+0x1bc/0x340 [ 80.677540][ T6656] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 80.683313][ T6656] alloc_pages_noprof+0xe1/0x100 [ 80.688774][ T6656] __vmalloc_node_range_noprof+0x72e/0xec0 [ 80.695332][ T6656] __kvmalloc_node_noprof+0x121/0x170 [ 80.700926][ T6656] ip_set_alloc+0x1f/0x30 [ 80.705540][ T6656] hash_netiface_create+0x273/0x730 [ 80.711055][ T6656] ip_set_create+0x359/0x8a0 [ 80.715670][ T6656] nfnetlink_rcv_msg+0x4a9/0x570 [ 80.720892][ T6656] netlink_rcv_skb+0x12c/0x230 [ 80.726304][ T6656] nfnetlink_rcv+0x16c/0x15d0 [ 80.731357][ T6656] netlink_unicast+0x599/0x670 [ 80.736493][ T6656] netlink_sendmsg+0x5cc/0x6e0 [ 80.741455][ T6656] __sock_sendmsg+0x140/0x180 [ 80.746502][ T6656] ____sys_sendmsg+0x312/0x410 [ 80.751447][ T6656] __sys_sendmsg+0x19d/0x230 [ 80.756485][ T6656] __x64_sys_sendmsg+0x46/0x50 [ 80.761453][ T6656] x64_sys_call+0x2734/0x2dc0 [ 80.766258][ T6656] do_syscall_64+0xc9/0x1c0 [ 80.771142][ T6656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.777518][ T6656] [ 80.780691][ T6656] value changed: 0x00000000ffffaa13 -> 0x00000000ffffaa14 [ 80.788207][ T6656] [ 80.791140][ T6656] Reported by Kernel Concurrency Sanitizer on: [ 80.799171][ T6656] CPU: 0 UID: 0 PID: 6656 Comm: syz.2.851 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 80.813210][ T6656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 80.824111][ T6656] ================================================================== [ 81.087216][ T28] bridge_slave_1: left allmulticast mode [ 81.092937][ T28] bridge_slave_1: left promiscuous mode [ 81.100114][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.111064][ T28] bridge_slave_0: left allmulticast mode [ 81.117646][ T28] bridge_slave_0: left promiscuous mode [ 81.124876][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.179443][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.192913][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.203169][ T28] bond0 (unregistering): Released all slaves [ 81.252541][ T28] hsr_slave_0: left promiscuous mode [ 81.259591][ T28] hsr_slave_1: left promiscuous mode [ 81.266346][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.280237][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.313111][ T28] team0 (unregistering): Port device team_slave_1 removed [ 81.324877][ T28] team0 (unregistering): Port device team_slave_0 removed [ 81.700278][ T28] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.758763][ T28] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.808992][ T28] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.859219][ T28] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.924625][ T28] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.978931][ T28] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.049403][ T28] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.100131][ T28] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.163763][ T28] bridge_slave_1: left allmulticast mode [ 82.170791][ T28] bridge_slave_1: left promiscuous mode [ 82.177704][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.185665][ T28] bridge_slave_0: left allmulticast mode [ 82.192456][ T28] bridge_slave_0: left promiscuous mode [ 82.198290][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.328536][ T28] @ (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.338990][ T28] @ (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.348782][ T28] @ (unregistering): Released all slaves [ 82.357556][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.368171][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.378582][ T28] bond0 (unregistering): Released all slaves [ 82.418403][ T28] tipc: Left network mode [ 82.426346][ T28] hsr_slave_0: left promiscuous mode [ 82.433163][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.441009][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.448861][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.456606][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.466437][ T28] hsr_slave_0: left promiscuous mode [ 82.473321][ T28] hsr_slave_1: left promiscuous mode [ 82.480312][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.490685][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.501002][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.510716][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.523810][ T28] veth1_macvtap: left promiscuous mode [ 82.531123][ T28] veth0_macvtap: left promiscuous mode [ 82.538098][ T28] veth1_vlan: left promiscuous mode [ 82.544014][ T28] veth0_vlan: left promiscuous mode [ 82.550032][ T28] veth1_macvtap: left promiscuous mode [ 82.555653][ T28] veth0_macvtap: left promiscuous mode [ 82.561997][ T28] veth1_vlan: left promiscuous mode [ 82.567813][ T28] veth0_vlan: left promiscuous mode [ 82.663041][ T28] team0 (unregistering): Port device team_slave_1 removed [ 82.673223][ T28] team0 (unregistering): Port device team_slave_0 removed [ 82.725483][ T28] team0 (unregistering): Port device team_slave_1 removed [ 82.737925][ T28] team0 (unregistering): Port device team_slave_0 removed [ 83.260376][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.299340][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.339529][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.389295][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.453341][ T28] bridge_slave_1: left allmulticast mode [ 83.459290][ T28] bridge_slave_1: left promiscuous mode [ 83.465276][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.473796][ T28] bridge_slave_0: left allmulticast mode [ 83.479885][ T28] bridge_slave_0: left promiscuous mode [ 83.485881][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.579123][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.593071][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.604577][ T28] bond0 (unregistering): Released all slaves [ 83.650676][ T28] hsr_slave_0: left promiscuous mode [ 83.656503][ T28] hsr_slave_1: left promiscuous mode [ 83.662553][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.670769][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.679502][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.688253][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.697409][ T28] veth1_macvtap: left promiscuous mode [ 83.703265][ T28] veth0_macvtap: left promiscuous mode [ 83.709120][ T28] veth1_vlan: left promiscuous mode [ 83.714900][ T28] veth0_vlan: left promiscuous mode [ 83.777233][ T28] team0 (unregistering): Port device team_slave_1 removed [ 83.786848][ T28] team0 (unregistering): Port device team_slave_0 removed [ 84.724288][ T5102] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.769608][ T5102] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.829086][ T5102] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.898768][ T5102] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.985149][ T5102] bond1: left allmulticast mode [ 84.990985][ T5102] bond1: left promiscuous mode [ 85.013385][ T5102] @ (unregistering): (slave geneve1): Releasing backup interface [ 85.025501][ T5102] @ (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.036260][ T5102] @ (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.048643][ T5102] @ (unregistering): Released all slaves [ 85.063030][ T5102] bond1 (unregistering): Released all slaves [ 85.107975][ T5102] tipc: Left network mode [ 85.115752][ T5102] hsr_slave_0: left promiscuous mode [ 85.121870][ T5102] hsr_slave_1: left promiscuous mode [ 85.127856][ T5102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.135698][ T5102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.143883][ T5102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.153511][ T5102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.164339][ T5102] veth1_vlan: left promiscuous mode [ 85.171205][ T5102] veth0_vlan: left promiscuous mode [ 85.230003][ T5102] team0 (unregistering): Port device team_slave_1 removed [ 85.241919][ T5102] team0 (unregistering): Port device team_slave_0 removed